MCP Crawl4AI RAG (rbj2000/mcp-crawl4ai-rag) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it: we have no way to read this server ourselves. No publisher has claimed this listing.

Back to MCP Trust Indexm8ven
C
Limited view
71/100
2 months ago

MCP Crawl4AI RAG

A database-agnostic MCP server that integrates web crawling with Retrieval Augmented Generation, supporting multiple AI providers and vector database backends for flexible and intelligent content retrieval.

→ rbj2000/mcp-crawl4ai-rag· listed on glama

Limited view. Automated analysis covers part of this stack. Findings reflect what we verified. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

Limited view: static analysis for Python is partially covered.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

rbj2000

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 14 credentials: NEO4J_PASSWORD, HUGGINGFACE_TOKEN, OPENAI_API_KEY, ANTHROPIC_API_KEY, COHERE_API_KEY, HUGGINGFACE_API_KEY, VLLM_API_KEY, CONFLUENCE_API_TOKEN, CONFLUENCE_OAUTH2_CLIENT_SECRET, CONFLUENCE_OAUTH2_ACCESS_TOKEN, CONFLUENCE_OAUTH2_REFRESH_TOKEN, SUPABASE_SERVICE_KEY, PINECONE_API_KEY, WEAVIATE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configENABLE_MONITORING
configCOMPOSE_PROFILES
configNEO4J_URIbolt://localhost:7687
configNEO4J_USER"": "neo4j",
🔐 secretNEO4J_PASSWORDyour_neo4j_password
configUSE_RERANKING
configRERANKING_PROVIDERollama # Options: ollama, openai, huggingface
configRERANKING_MODEL
configRERANKING_MAX_RESULTS
configRERANKING_TIMEOUT
🔐 secretHUGGINGFACE_TOKEN
configAI_PROVIDERexport =openai # or ollama, vllm
🔐 secretOPENAI_API_KEYexport =your_key # For OpenAI provider
configOPENAI_BASE_URL
configOPENAI_ORGANIZATION
configOPENAI_MAX_RETRIES
configOPENAI_TIMEOUT
configOLLAMA_BASE_URL
configOLLAMA_MAX_RETRIES
configOLLAMA_TIMEOUT
configOLLAMA_PULL_MODELS
🔐 secretANTHROPIC_API_KEY
configANTHROPIC_BASE_URL
configANTHROPIC_MAX_RETRIES
configANTHROPIC_TIMEOUT
🔐 secretCOHERE_API_KEY
configCOHERE_BASE_URL
configCOHERE_MAX_RETRIES
configCOHERE_TIMEOUT
🔐 secretHUGGINGFACE_API_KEY
configHUGGINGFACE_MAX_RETRIES
configHUGGINGFACE_TIMEOUT
configVLLM_BASE_URL
🔐 secretVLLM_API_KEYyour_vllm_api_key
configVLLM_MAX_RETRIES
configVLLM_TIMEOUT
configVLLM_VISION_ENABLEDfalse # Enable vision models (coming soon)
configCONFLUENCE_URL
configCONFLUENCE_SSL_VERIFY
configCONFLUENCE_CA_BUNDLE
configCONFLUENCE_TIMEOUT
configCONFLUENCE_CONNECT_TIMEOUT
configCONFLUENCE_POOL_SIZE
configCONFLUENCE_MAX_RETRIES
configCONFLUENCE_DEPLOYMENT_TYPE
configCONFLUENCE_AUTH_METHOD
configCONFLUENCE_OAUTH2_CLIENT_ID
configCONFLUENCE_PAT
🔐 secretCONFLUENCE_API_TOKEN
configCONFLUENCE_USERNAME
🔐 secretCONFLUENCE_OAUTH2_CLIENT_SECRET
🔐 secretCONFLUENCE_OAUTH2_ACCESS_TOKEN
🔐 secretCONFLUENCE_OAUTH2_REFRESH_TOKEN
configCONFLUENCE_OAUTH2_TOKEN_EXPIRES_AT
configCONFLUENCE_CLOUD_ID
configCONFLUENCE_MAX_PAGES
configCONFLUENCE_MAX_DEPTH
configUSE_AGENTIC_RAG
configCONFLUENCE_SKIP_UNCHANGED
configUSE_KNOWLEDGE_GRAPH## Knowledge Graph Tools (requires =true, see below)
configHOST
configOLLAMA_EMBEDDING_MODELnomic-embed-text
configOLLAMA_LLM_MODELllama3.2:1b
configVECTOR_DB_PROVIDERexport =sqlite # or supabase, pinecone, neo4j_vector
configSQLITE_DB_PATH
configSUPABASE_URLyour_supabase_project_url
🔐 secretSUPABASE_SERVICE_KEYyour_supabase_service_key
configUSE_HYBRID_SEARCH
configTRANSPORT"": "stdio",
configEMBEDDING_DIMENSION1536 # Must match your embedding model dimensions
configOPENAI_EMBEDDING_MODELtext-embedding-3-small
🔐 secretPINECONE_API_KEY
configPINECONE_ENVIRONMENT
configPINECONE_INDEX_NAME
configWEAVIATE_URL
🔐 secretWEAVIATE_API_KEY
configWEAVIATE_CLASS_NAME
configNEO4J_DATABASE
configMODEL_CHOICE
configUSE_CONTEXTUAL_EMBEDDINGS
configGENERATE_TEST_REPORT
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployPORT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

17/17 tools missing one or more hints — crawl_confluence_space (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); crawl_confluence_page (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_confluence_sources (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +14 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

14/17 tool handlers declare input schemas (82%)

Declare an inputSchema with zod/joi/yup on every tool definition.

Tests exist

No test files found

Add tests that exercise each declared tool.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/rbj2000-mcp-crawl4ai-rag-1aoa6o)](https://m8ven.ai/mcp/rbj2000-mcp-crawl4ai-rag-1aoa6o)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: f37bb8b2572198e69048cff1b741b518d3ac661a
code hash: b2dc4a151081addb40ee7ed6be5ed443291cfb83bc02cfd52b7cf6983f691f41
verified: 6/21/2026, 10:32:37 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client