artifacty

Item: artifacty
Rating: 45
Author: M8ven

A local, agent-to-agent artifact exchange for LLM workflows. Enables MCP-capable tools like Claude, Codex, and Gemini to publish, list, read, update, and continue from artifacts without copying content through chat.

→ raeseoklee/artifacty · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: ARTIFACTY_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configARTIFACTY_ALLOW_SECRETS— Artifact content is scanned for common API keys and private keys before storage. Use --allow-secrets or =true only for intentional exceptions.

🔐 secretARTIFACTY_API_TOKEN— export ="$(artifacty token --raw)"

configARTIFACTY_ENABLE_REACT_RENDERER— React artifacts are source-only by default. Set =true to execute them in a sandboxed frame with a frame-scoped CSP that permits JSX transformation.

configARTIFACTY_HOME— /path/to/shared/store artifacty serve

configARTIFACTY_HOST

configARTIFACTY_LOCALE

configARTIFACTY_PORT

configARTIFACTY_SHARE_MODE— Binding outside localhost requires both =lan or team and ARTIFACTY_API_TOKEN.

configARTIFACTY_URL

configLOGNAME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/raeseoklee-artifacty-7rlt3p)](https://m8ven.ai/mcp/raeseoklee-artifacty-7rlt3p)

commit: 00b2b7c86db87b294053bfe0e56b140427a1c66d

code hash: 13a632f4223c1f19f100e43559e539e9e5240f45f69584032c470df51fb6a2a0

verified: 6/25/2026, 9:55:55 AM

view raw JSON →