Aggregates multiple backend MCP servers into a single unified interface with optional web management UI for tool control and configuration.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.ADMIN_PASSWORD— (Required if Admin UI enabled) Password for Admin UI login. Default: password (Change this!).ADMIN_USERNAME— (Required if Admin UI enabled) Username for Admin UI login. Default: admin.ALLOWED_KEYS— export ="client_key1,client_key2"ALLOWED_TOKENS— If authentication is enabled on the proxy (via ALLOWED_KEYS or ), the client needs to provide the corresponding credentials.ENABLE_ADMIN_UI— ## ✨ Optional Web Admin UI (=true)HTTP_TOOL_CALL_MAX_RETRIES— (Optional) Maximum number of retry attempts for HTTP tool calls (after the initial failure). Default: 2. See the "Enhanced Reliability Features" section for details.HTTP_TOOL_CALL_RETRY_DELAY_BASE_MS— (Optional) Base delay in milliseconds for HTTP tool call retries, used in exponential backoff. Default: 300. See the "Enhanced Reliability Features" section for details.LOGGING— (Optional) Controls the minimum log level output by the server.PORT— export =8080RETRY_HTTP_TOOL_CALL— (Optional) Controls whether to retry on HTTP tool call connection errors. Set to "true" to enable, "false" to disable. Default: true. See the "Enhanced Reliability Features" section for details.RETRY_SSE_TOOL_CALL— (Optional) Controls whether to enable retries for SSE tool calls. Set to "true" to enable, "false" to disable. Default: true. See the "Enhanced Reliability Features" section for details.RETRY_STDIO_TOOL_CALL— export ="true"SESSION_SECRET— export ='your_very_strong_random_secret_here'SSE_TOOL_CALL_MAX_RETRIES— (Optional) Maximum number of retry attempts for SSE tool calls (after the initial failure). Default: 2. See the "Enhanced Reliability Features" section for details.SSE_TOOL_CALL_RETRY_DELAY_BASE_MS— (Optional) Base delay in milliseconds for SSE tool call retries, used in exponential backoff. Default: 300. See the "Enhanced Reliability Features" section for details.STDIO_TOOL_CALL_MAX_RETRIES— (Optional) Maximum number of retry attempts for Stdio tool calls (after the initial failure). Default: 2. See the "Enhanced Reliability Features" section for details.STDIO_TOOL_CALL_RETRY_DELAY_BASE_MS— (Optional) Base delay in milliseconds for Stdio tool call retries, used in exponential backoff. Default: 300. See the "Enhanced Reliability Features" section for details.TOOLS_FOLDER— If omitted, the effective directory depends on the environment variable (see Environment Variables section).[](https://m8ven.ai/mcp/ptbsare-mcp-proxy-server-1bxv5f)