CacheBash (rezzedai/cachebash) is an MCP server listed on the M8ven Trust Index. It scores 24 out of 100, grade F. It declares 108 tools. No publisher has claimed this listing.

F
Warning
24/100

CacheBash

An MCP server that coordinates AI coding agents with mobile notifications, enabling task queues, inter-agent messaging, session monitoring, and human-in-the-loop approvals.

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

rezzedai

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: DISPATCHER_WEBHOOK_SECRET. We can’t prove the destination matches the brand the credential belongs to.
🚨
Hardcoded credentials detected
1 live-looking API key in source: 1 Google API key
🔐
You'll be asked for 4 credentials: DISPATCHER_WEBHOOK_SECRET, GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, REZZED_AGENT_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes108 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

dispatch_get_tasks

Get tasks created for programs to work on

relay_get_messages

Check for pending messages from programs. Default call DRAINS the caller's own inbox (matching messages transition to delivered). Fleet-supervision reads of another program's inbox MUST pass markAsRead:false explicitly.

relay_get_dead_letters

View messages that failed delivery. Admin only.

pulse_update_session

Update working status visible in the app

relay_send_message

Send a message to a running program. Relay v0.2.

dispatch_create_task

Create a new task for a program to work on

dispatch_claim_task

Claim a pending task to start working on it

dispatch_complete_task

Mark a task as complete (done) or failed

signal_send_alert

Send an alert notification to the user's mobile device

keys_list_keys

List all API keys for the authenticated user. Returns metadata, never raw keys.

audit_get_audit

Query the Gate audit log. Admin only.

relay_get_sent_messages

Query sent messages from a program's outbox. Admin can query any source.

metrics_get_comms_metrics

Get aggregated relay message metrics by period. Counts by status, avg delivery latency, per-program breakdown.

pulse_get_fleet_health

Get health status of all programs. Shows heartbeat age, pending messages/tasks per program.

relay_query_message_history

Query full message history with bodies. Requires at least one of: threadId, source, target.

metrics_get_cost_summary

Get aggregated cost/token spend for completed tasks. Supports period filtering and grouping by program or type.

metrics_get_operational_metrics

Get aggregated operational metrics from the telemetry event stream. Task success rates, latency, safety gate stats, delivery health. Admin only.

trace_query_traces

Query execution traces for debugging. Filters: sprintId, taskId, programId, tool, since/until.

sprint_get_sprint

Get a sprint's full state including definition, stories, and stats.

admin_merge_accounts

Merge an alternate Firebase UID into a canonical account. Admin only. Maps the alternate UID to the canonical tenant so all data access is unified.

audit_get_ack_compliance

Get ACK compliance report. Returns statistics on DIRECTIVE messages and their ACK status.

clu_ingest

Ingest content for CLU analysis. Stores raw content in a session for later analysis.

clu_analyze

Run CLU analysis on ingested content. Extracts patterns, opportunities, gaps, and blind spots using LLM.

clu_report

Generate a formatted report from CLU analysis results.

dispatch_get_task_by_id

Get a single task by ID with full details including completion status and result

dispatch_unclaim_task

Unclaim an active task, returning it to created status for re-claiming. Circuit breaker flags tasks with 3+ unclaims.

dispatch_batch_claim_tasks

Claim multiple pending tasks in a single call. Each task claims independently (not all-or-nothing).

dispatch_record_task_telemetry

Record measured token/cost telemetry on a completed task (fill-if-null; never overwrites self-reported values). For host-side telemetry hooks. Completing program or admin only.

dispatch_batch_complete_tasks

Complete multiple tasks in a single call. Each task completes independently (not all-or-nothing).

dispatch_get_contention_metrics

Get task claim contention metrics. Shows claims attempted, won, contention events, and mean time to claim.

dispatch_dispatch

Dispatch work to a target program with enforced pre-flight checks, durable obligation persistence, auto-wake, and uptake verification. Canonical dispatch API: returns success only when the target claims the task or ACKs the directive; otherwise returns a tracked pending handle.

dispatch_retry_task

Retry a failed or completed task. Resets the task to created status for re-claiming. Optionally updates target program and/or priority.

dispatch_abort_task

Abort a running or pending task. Marks the task as permanently cancelled (different from unclaim which requeues).

dispatch_reassign_task

Reassign a task to a different program without losing context. Preserves original source and instructions.

dispatch_escalate_task

Escalate a task's priority and/or route it up the chain. Default chain: builder → iso → vector → Flynn.

dispatch_quarantine_program

Quarantine a program to block all task dispatches. Used for programs experiencing repeated failures. Requires dispatch.write capability.

dispatch_unquarantine_program

Unquarantine a program to restore task dispatch. Resets failure count. Requires dispatch.write capability.

dispatch_replay_task

Replay a completed task with optional modifications. Creates a new task cloned from the original with links preserved. Use this to re-execute tasks with modified instructions, different targets, or changed priorities.

dispatch_approve_task

Approve a task in supervised mode. Transitions task from completing → done. Only works on tasks with policy_mode=supervised that are awaiting approval.

dispatch_get_task_lineage

Query the lineage chain of a task. Returns ancestors (tasks this was replayed/retried/reassigned/escalated from) and descendants (tasks derived from this one). Also returns the state transition log.

dispatch_export_tasks

Export tasks with full details including lineage fields and state transitions. Supports filtering by status and date range.

dispatch_suggest_target

Wave 16: Suggest optimal target programs based on historical success rates. Returns ranked list of programs with success rates for matching task characteristics. Requires dispatch.read capability.

dispatch_backfill_task_expires_at

PLAN-W1: fleet-internal only. Scans the caller's tasks collection for documents with no expiresAt field, classifies each via the reviewed classifyForBackfill() rule, and (only when execute:true) writes expiresAt onto them in batches of <=400 -- never overwrites a doc that already has the field, neve

dispatch_reap_expired_tasks

PLAN-W4: fleet-internal only. Scans the caller's tasks collection for documents where expiresAt EXISTS and is <= now, and (only when execute:true) deletes them in batches of <=400. NEVER deletes a document lacking expiresAt (W4-R1). Dry-run (execute:false) by default -- reports scanned/fieldLessCoun

dream_peek

Check for pending dream sessions (lightweight check for shell hooks)

dream_activate

Atomically activate a dream session

feedback_submit_feedback

Submit feedback (bug report, feature request, or general) which creates a GitHub Issue

gsp_read

Read GSP state entries by namespace/key/tier. Returns a single entry or scans a namespace.

gsp_write

Write an operational GSP state entry. Governance enforcement rejects constitutional/architectural writes with a redirect hint to gsp_propose. Uses Firestore transactions for atomic writes.

gsp_diff

Diff GSP state entries since a version or timestamp. Returns changed entries for reconciliation.

gsp_bootstrap

Get full context payload for an agent boot. Single call replaces 4+ boot API calls. Returns identity, constitutional state, operational state, agent memory, and pending context.

gsp_seed

Seed constitutional or architectural state into GSP. Admin/orchestrator only. Bypasses gsp_write governance enforcement for authorized seeding.

gsp_propose

Propose a change to constitutional or architectural state. Creates a governance proposal for review. Operational state should use gsp_write instead.

gsp_subscribe

Subscribe to GSP state change notifications. Supports message-based and webhook callbacks. Use unsubscribe: true to deactivate.

gsp_resolve

Resolve a pending governance proposal. Approve, reject, or withdraw. Approved proposals apply state changes atomically.

gsp_search

Search GSP state entries by text query. Searches across keys, values, and descriptions. Returns scored results ranked by relevance.

keys_create_key

Create a new per-program API key. Returns the raw key (only shown once).

keys_revoke_key

Revoke an API key by its hash. Soft revoke — key stays in DB for audit.

keys_rotate_key

Rotate the calling API key. Atomically creates a new key and grace-expires the old one (30s window).

metrics_log_rate_limit_event

Log a rate limit/throttle event from a session. Written to rate_limit_events collection with 7-day TTL.

metrics_get_rate_limit_events

Query rate limit events with optional period and session filtering. Returns events ordered by timestamp desc.

metrics_get_cost_forecast

Project monthly spend based on current burn rate. Returns forecasted costs, daily burn rate, and top spending programs.

metrics_get_sla_compliance

Track whether tasks meet expected completion time based on priority and action type. Returns compliance rate and breach breakdown.

metrics_get_program_health

Automated health scoring per program based on success rate, latency, error diversity, heartbeat freshness, and cost efficiency. Returns 0-100 health score with recommendations.

pattern_consolidate

Scan all program states for learned patterns and auto-promote patterns when N+ agents have learned the same pattern. Promoted patterns are written to GSP knowledge store with tier 'architectural' and key format 'pattern/{domain}/{slug}'. Tracks provenance (contributors, confidence, evidence count).

pattern_get_consolidated

Retrieve all consolidated/promoted patterns from the GSP knowledge store. Returns patterns grouped by domain with aggregate stats (confidence, contributor count, evidence count).

policy_create

Create a new policy. Operational-tier policies can be created directly. Constitutional-tier requires gsp_seed, architectural-tier requires gsp_propose.

policy_update

Update an existing operational-tier policy. Cannot update constitutional or architectural policies directly.

policy_delete

Delete an operational-tier policy. Cannot delete constitutional or architectural policies.

policy_get

Get a single policy by ID.

policy_list

List all policies with optional filters by tier, enforcement, or enabled status.

policy_check

Check if a dispatch would violate any policies without creating a task. Useful for dry-run validation.

state_get_program_state

Read a program's persistent operational state. Programs can read their own state; admin/auditor can read any.

state_update_program_state

Write a program's persistent operational state. Programs can only write their own state. Partial updates merge with existing.

state_get_context_history

Query timestamped context snapshots (shadow journal). Returns entries newest-first. Same access rules as get_program_state.

state_store_memory

Store a learned pattern into agent memory. Upserts by pattern ID — existing patterns with the same ID are replaced.

state_recall_memory

Recall learned patterns from agent memory. Supports optional domain filter and text search (grep-style, case-insensitive substring match across pattern, evidence, and domain fields).

state_memory_health

Get memory health summary for a program. Returns pattern counts (total, active, stale, promoted), domains list, last update timestamp, and decay configuration.

state_delete_memory

Delete a learned pattern from agent memory by ID. Hard delete — pattern is removed, not just marked stale.

state_reinforce_memory

Reinforce an existing memory pattern. Bumps lastReinforced timestamp, optionally updates confidence and evidence. Resets stale flag.

programs_list_programs

List all registered programs for the tenant. Filterable by role, group, active status.

programs_update_program

Update a program's metadata. Programs can update their own entry; admin can update any.

pulse_create_session

Create a new session to track work progress

pulse_list_sessions

List active sessions for the authenticated user

pulse_get_fleet_timeline

Query historical fleet snapshots with configurable resolution. Returns time-series data for fleet health visualization.

pulse_write_fleet_snapshot

Write a fleet health snapshot for time-series tracking. Called by the Grid Dispatcher daemon.

pulse_get_context_utilization

Query context window utilization time-series. Returns contextHistory from session docs. If sessionId provided, returns that session; otherwise aggregates across active sessions.

pulse_pause_program

Pause a program's task intake. Paused programs still send heartbeats but won't receive new dispatched tasks until resumed.

pulse_resume_program

Resume a paused program's task intake. Re-enables dispatch of tasks to the program.

relay_list_groups

List available multicast groups and their members. Use group names as targets in send_message for multicast.

relay_send_directive

Send a directive to another program. Convenience wrapper for send_message that auto-sets message_type=DIRECTIVE and action=interrupt. Use for orchestrator→worker commands.

request_help

Ask the support team for help. Use when you're stuck or need assistance — they'll be notified and in touch shortly.

schedule_create

Create a recurring schedule: {name, target, cron, taskTemplate, budgetCap, enabled}

schedule_list

List all schedules (filterable by target program, enabled status)

schedule_get

Get schedule by ID with next/last run times

schedule_update

Update cron, budget cap, enable/disable a schedule

schedule_delete

Remove a schedule

signal_ask_question

Send a question to the user's mobile device and wait for a response

signal_get_response

Check if the user has responded to a question

sprint_create_sprint

Create a new sprint to track parallel story execution

8 further tools are not listed here. The complete surface is in the source.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configADMIN_USER_ID
configAUTH_MODE
configCACHEBASH_PROFILE
configCACHEBASH_TENANT_ID
configCLOUD_RUN_URL
🔐 secretDISPATCHER_WEBHOOK_SECRET
configDISPATCHER_WEBHOOK_URL
configDISPATCH_CALLER_BOUNDARY_TIMEOUT_MS
configDISPATCH_RESPONSE_RESERVE_MS
configFIREBASE_PROJECT_ID
configGCP_PROJECT_ID
configGITHUB_FEEDBACK_PAT
configGITHUB_PROJECT_ID
configGITHUB_REPO
configGITHUB_REPO_NAME
configGITHUB_REPO_OWNER
🔐 secretGITHUB_TOKEN
🔐 secretGITHUB_WEBHOOK_SECRET
configINTERNAL_OIDC_AUDIENCE
configLITE_URL
configOAUTH_ALLOWED_EMAILS
configOAUTH_ALLOWED_UIDS
configOAUTH_ISSUER
🔐 secretREZZED_AGENT_KEY
configSCHEDULER_SA_EMAIL
configWAKE_HOST_URL
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployPORT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

108/108 tools missing one or more hints — dispatch_get_tasks (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); relay_get_messages (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); relay_get_dead_letters (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +105 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

No hardcoded API keys

1 live-looking API key in source: 1 Google API key

Move secrets to environment variables (process.env.X) or your secret manager.

Tool test coverage

84/108 tools referenced in tests (78%)

Write tests that reference each tool by name so every tool has at least one test.

Secrets stay with their owner

1 secret sent to a request target we could not resolve (DISPATCHER_WEBHOOK_SECRET → dynamic) — often a configured endpoint, not necessarily third-party

Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.

Secrets not logged

1 secret value sent to error

Redact or omit secret values from log output.

Domain consistency

npm scope @cachebash doesn't match GitHub owner rezzedai

Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/rezzedai/cachebash?variant=verified)](https://m8ven.ai/mcp/rezzedai/cachebash)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 81f31ccfe352d89f73f22c25c82316a08b9c1613
code hash: 300b728bf3026d4daa1dff4c037726a78de8adfc4fc9aa640fb249099dd876b5
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client