Back to MCP Trust Indexm8ven
45
/ 100
9 days ago
github_topic

claudexor

Multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode: quota-aware rotation across multiple Claude/Codex subscriptions, shared thread context, and cross-model review.

→ razzant/claudexor· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHubnpmGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: ANTHROPIC_API_KEY, GITHUB_TOKEN, OPENAI_API_KEY, OPENROUTER_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.3.3GHSA-hcf7-66rw-9f5r

Turbo: Login callback CSRF/session fixation

lowturbo@2.3.3GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretANTHROPIC_API_KEY— , ... as fallbacks; the raw-API route needs only a key).
configCLAUDEXOR_CLAUDE_BIN
configCLAUDEXOR_CLI_PATH
configCLAUDEXOR_CODEX_BIN
configCLAUDEXOR_CODEX_NATIVE_HOME
configCLAUDEXOR_CONFIG_DIR
configCLAUDEXOR_CONTROL_PORT
configCLAUDEXOR_CURSOR_BIN
configCLAUDEXOR_DAEMON_SOCK
configCLAUDEXOR_NODE_PATH
configCLAUDEXOR_NO_CONTROL_API
configCLAUDEXOR_OPENROUTER_BASE_URL
configCLAUDEXOR_OPENROUTER_MODEL
configCLAUDEXOR_REPO_ROOT
configCLAUDEXOR_REVIEWER_TIMEOUT_MS
configCLAUDEXOR_SWE_HARNESS
configCLAUDEXOR_SWE_MODEL_NAME
configCLAUDEXOR_SWE_TASK_TIMEOUT_SEC
configCLAUDEXOR_TRANSIENT_RETRY_INITIAL_DELAY_MS
configCLAUDEXOR_TRANSIENT_RETRY_MAX
configCLAUDEXOR_TRANSIENT_RETRY_MAX_DELAY_MS
🔐 secretGITHUB_TOKEN
🔐 secretOPENAI_API_KEY— opencode — OR a provider API key (adapters accept ,
configOPENAI_BASE_URL
🔐 secretOPENROUTER_API_KEY
configVITEST
configCLAUDEXOR_TB_REPO
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/razzant-claudexor-1sb1r4)](https://m8ven.ai/mcp/razzant-claudexor-1sb1r4)
commit: 2b0a5e17c6bc1298c43f360da32630042170c28e
code hash: 77f5a8d5f6f3f365c566b96bd448d63ac22938c0111ece0fc8096ba9991192d3
verified: 7/22/2026, 8:43:55 AM
view raw JSON →