0
grade F
10 days ago
glama
Purple Flea Casino
Provably fair crypto casino API for AI agents. Place bets on 8 games (coin flip, dice, roulette, blackjack, crash, plinko), run tournaments, issue 1v1 challenges, and earn 10% referral commissions. No KYC, pure API.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
3 flows detected: WALLET_SERVICE_KEY. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 9 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 4 credentials: CASINO_XMR_API_KEY, TREASURY_PRIVATE_KEY, WAGYU_API_KEY, WALLET_SERVICE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ALLOWED_ORIGINS🔐 secret
CASINO_XMR_API_KEYconfig
DB_PATH— ./data/casino.db SQLite database pathconfig
FAUCET_URLconfig
PORT— 3000 REST API portconfig
PUBLIC_WALLET_URL🔐 secret
TREASURY_PRIVATE_KEY— Base chain private key (for sending withdrawals)🔐 secret
WAGYU_API_KEY🔐 secret
WALLET_SERVICE_KEY— Wallet service auth keyconfig
WALLET_SERVICE_URL// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/purple-flea-agent-casino-1k7x9b)commit: c576e44875aaf9fda153a098ad5b809deffc177d
code hash: 5ca5a145fcd87648c4d409e3f98b5323422def723173702ff691b12797832ba6
verified: 4/11/2026, 2:19:38 PM