64
grade C
10 days ago
glama
PTO MCP Server
Exposes PTOAi user context to Agent Builder by connecting to a Supabase database. It allows agents to retrieve user profiles, intake and follow-up data, and manage weekly plans.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: SUPABASE_ANON_KEY. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 3 credentials: MCP_OAUTH_COOKIE_SECRET, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
MCP_ALLOWED_ORIGINS— export =https://platform.openai.com,https://chatgpt.comconfig
MCP_HOSTconfig
MCP_HTTP_STATELESS— export =true🔐 secret
MCP_OAUTH_COOKIE_SECRET— export =...config
MCP_OAUTH_LOGIN_URL— If you want to use your own login page, set and it will redirect there.config
MCP_OAUTH_REDIRECT_ORIGINS— export =https://chatgpt.com,https://chat.openai.comconfig
MCP_PUBLIC_URL— export =https://mcp-0brh.onrender.comconfig
MCP_TRANSPORT— export =httpconfig
PORT— export =8787🔐 secret
SUPABASE_ANON_KEY— export =...🔐 secret
SUPABASE_SERVICE_ROLE_KEY— export =...config
SUPABASE_URL— export =...// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/pto-agi-mcp-1rxslu)commit: 0f0d7ce3bdd4f07445c238c258f9e83f1a78021e
code hash: a9526789520aa49a2880cab20c236b1f4b536610894a76bad5c5d6917d7a8259
verified: 4/11/2026, 3:02:29 PM