73
/ 100
27 days ago
official

Raven

Design intelligence for AI-generated UI — principles, patterns, content, brand, design tokens.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
2 tools describe read intent but their handlers mutate — audit_page (line 1897: spacingRegex.exec(html)); audit_swiftui (line 2917: sysFontRe.exec(src))
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: ANTHROPIC_API_KEY, RESEND_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretANTHROPIC_API_KEY
configDRY_RUN
configGITHUB_OUTPUT
configINPUT_BUMP
configMAX_ISSUES
configRAVEN_NO_DAILY_DIGEST
configRAVEN_NO_TELEMETRY
configRAVEN_NO_UPDATE_CHECK
configRAVEN_NO_USAGE_LOGDisable entirely: =1.
configRAVEN_USAGE_LOGLocation: ~/.raven/usage.jsonl (override with =/path).
🔐 secretRESEND_API_KEY
configRESEND_AUDIENCE_ID
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/raven-mcp-1hln0r)](https://m8ven.ai/mcp/raven-mcp-1hln0r)
commit: 03a58b5b96ae3567f0f7b6c4c88e49831b2ace1e
code hash: 1ba16929bb4c5fd0b1cbff50658e2bb20b1f985e0cd07a66f686403715b716e9
verified: 6/10/2026, 11:44:32 AM
view raw JSON →