ralph-hero-mcp-server

MCP server for GitHub Projects V2 - Ralph workflow automation

→ cdubiel08/ralph-hero· npm: ralph-hero-mcp-server· listed on npm

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 3 credentials: RALPH_GH_PROJECT_TOKEN, RALPH_GH_REPO_TOKEN, RALPH_HERO_GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configOTEL_EXPORTER_OTLP_ENDPOINT

configRALPH_ACTIVITY_DIR

configRALPH_DEBUG— No Enable JSONL debug logging + OpenTelemetry export

configRALPH_GH_OWNER— "": "your-github-username",

configRALPH_GH_PROJECT_NUMBER— Yes GitHub Projects V2 number

configRALPH_GH_PROJECT_OWNER— No Project owner if different from repo owner

🔐 secretRALPH_GH_PROJECT_TOKEN— No Separate project token (falls back to repo token)

configRALPH_GH_REPO— No Repository name (inferred from project if omitted)

🔐 secretRALPH_GH_REPO_TOKEN— No Separate repo token (falls back to main token)

🔐 secretRALPH_HERO_GITHUB_TOKEN— "": "ghp_your_token_here",

configRALPH_HERO_RUN_MAIN

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/ralph-hero-mcp-server-1mmk5u)](https://m8ven.ai/mcp/ralph-hero-mcp-server-1mmk5u)

commit: 529bb5fc74658e23e01eecca8588547499adfaa0

code hash: 8fc43a404566c4ae54b74f27448afc61870c3f9bff4723fbffd0813ebbfc138d

verified: 6/10/2026, 10:50:45 AM

view raw JSON →