CacheBash (rezzedai/cachebash) is an MCP server listed on the M8ven Trust Index. It scores 24 out of 100, grade F. It declares 108 tools. No publisher has claimed this listing.
An MCP server that coordinates AI coding agents with mobile notifications, enabling task queues, inter-agent messaging, session monitoring, and human-in-the-loop approvals.
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
rezzedai
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
dispatch_get_tasksGet tasks created for programs to work on
relay_get_messagesCheck for pending messages from programs. Default call DRAINS the caller's own inbox (matching messages transition to delivered). Fleet-supervision reads of another program's inbox MUST pass markAsRead:false explicitly.
relay_get_dead_lettersView messages that failed delivery. Admin only.
pulse_update_sessionUpdate working status visible in the app
relay_send_messageSend a message to a running program. Relay v0.2.
dispatch_create_taskCreate a new task for a program to work on
dispatch_claim_taskClaim a pending task to start working on it
dispatch_complete_taskMark a task as complete (done) or failed
signal_send_alertSend an alert notification to the user's mobile device
keys_list_keysList all API keys for the authenticated user. Returns metadata, never raw keys.
audit_get_auditQuery the Gate audit log. Admin only.
relay_get_sent_messagesQuery sent messages from a program's outbox. Admin can query any source.
metrics_get_comms_metricsGet aggregated relay message metrics by period. Counts by status, avg delivery latency, per-program breakdown.
pulse_get_fleet_healthGet health status of all programs. Shows heartbeat age, pending messages/tasks per program.
relay_query_message_historyQuery full message history with bodies. Requires at least one of: threadId, source, target.
metrics_get_cost_summaryGet aggregated cost/token spend for completed tasks. Supports period filtering and grouping by program or type.
metrics_get_operational_metricsGet aggregated operational metrics from the telemetry event stream. Task success rates, latency, safety gate stats, delivery health. Admin only.
trace_query_tracesQuery execution traces for debugging. Filters: sprintId, taskId, programId, tool, since/until.
sprint_get_sprintGet a sprint's full state including definition, stories, and stats.
admin_merge_accountsMerge an alternate Firebase UID into a canonical account. Admin only. Maps the alternate UID to the canonical tenant so all data access is unified.
audit_get_ack_complianceGet ACK compliance report. Returns statistics on DIRECTIVE messages and their ACK status.
clu_ingestIngest content for CLU analysis. Stores raw content in a session for later analysis.
clu_analyzeRun CLU analysis on ingested content. Extracts patterns, opportunities, gaps, and blind spots using LLM.
clu_reportGenerate a formatted report from CLU analysis results.
dispatch_get_task_by_idGet a single task by ID with full details including completion status and result
dispatch_unclaim_taskUnclaim an active task, returning it to created status for re-claiming. Circuit breaker flags tasks with 3+ unclaims.
dispatch_batch_claim_tasksClaim multiple pending tasks in a single call. Each task claims independently (not all-or-nothing).
dispatch_record_task_telemetryRecord measured token/cost telemetry on a completed task (fill-if-null; never overwrites self-reported values). For host-side telemetry hooks. Completing program or admin only.
dispatch_batch_complete_tasksComplete multiple tasks in a single call. Each task completes independently (not all-or-nothing).
dispatch_get_contention_metricsGet task claim contention metrics. Shows claims attempted, won, contention events, and mean time to claim.
dispatch_dispatchDispatch work to a target program with enforced pre-flight checks, durable obligation persistence, auto-wake, and uptake verification. Canonical dispatch API: returns success only when the target claims the task or ACKs the directive; otherwise returns a tracked pending handle.
dispatch_retry_taskRetry a failed or completed task. Resets the task to created status for re-claiming. Optionally updates target program and/or priority.
dispatch_abort_taskAbort a running or pending task. Marks the task as permanently cancelled (different from unclaim which requeues).
dispatch_reassign_taskReassign a task to a different program without losing context. Preserves original source and instructions.
dispatch_escalate_taskEscalate a task's priority and/or route it up the chain. Default chain: builder → iso → vector → Flynn.
dispatch_quarantine_programQuarantine a program to block all task dispatches. Used for programs experiencing repeated failures. Requires dispatch.write capability.
dispatch_unquarantine_programUnquarantine a program to restore task dispatch. Resets failure count. Requires dispatch.write capability.
dispatch_replay_taskReplay a completed task with optional modifications. Creates a new task cloned from the original with links preserved. Use this to re-execute tasks with modified instructions, different targets, or changed priorities.
dispatch_approve_taskApprove a task in supervised mode. Transitions task from completing → done. Only works on tasks with policy_mode=supervised that are awaiting approval.
dispatch_get_task_lineageQuery the lineage chain of a task. Returns ancestors (tasks this was replayed/retried/reassigned/escalated from) and descendants (tasks derived from this one). Also returns the state transition log.
dispatch_export_tasksExport tasks with full details including lineage fields and state transitions. Supports filtering by status and date range.
dispatch_suggest_targetWave 16: Suggest optimal target programs based on historical success rates. Returns ranked list of programs with success rates for matching task characteristics. Requires dispatch.read capability.
dispatch_backfill_task_expires_atPLAN-W1: fleet-internal only. Scans the caller's tasks collection for documents with no expiresAt field, classifies each via the reviewed classifyForBackfill() rule, and (only when execute:true) writes expiresAt onto them in batches of <=400 -- never overwrites a doc that already has the field, neve…
dispatch_reap_expired_tasksPLAN-W4: fleet-internal only. Scans the caller's tasks collection for documents where expiresAt EXISTS and is <= now, and (only when execute:true) deletes them in batches of <=400. NEVER deletes a document lacking expiresAt (W4-R1). Dry-run (execute:false) by default -- reports scanned/fieldLessCoun…
dream_peekCheck for pending dream sessions (lightweight check for shell hooks)
dream_activateAtomically activate a dream session
feedback_submit_feedbackSubmit feedback (bug report, feature request, or general) which creates a GitHub Issue
gsp_readRead GSP state entries by namespace/key/tier. Returns a single entry or scans a namespace.
gsp_writeWrite an operational GSP state entry. Governance enforcement rejects constitutional/architectural writes with a redirect hint to gsp_propose. Uses Firestore transactions for atomic writes.
gsp_diffDiff GSP state entries since a version or timestamp. Returns changed entries for reconciliation.
gsp_bootstrapGet full context payload for an agent boot. Single call replaces 4+ boot API calls. Returns identity, constitutional state, operational state, agent memory, and pending context.
gsp_seedSeed constitutional or architectural state into GSP. Admin/orchestrator only. Bypasses gsp_write governance enforcement for authorized seeding.
gsp_proposePropose a change to constitutional or architectural state. Creates a governance proposal for review. Operational state should use gsp_write instead.
gsp_subscribeSubscribe to GSP state change notifications. Supports message-based and webhook callbacks. Use unsubscribe: true to deactivate.
gsp_resolveResolve a pending governance proposal. Approve, reject, or withdraw. Approved proposals apply state changes atomically.
gsp_searchSearch GSP state entries by text query. Searches across keys, values, and descriptions. Returns scored results ranked by relevance.
keys_create_keyCreate a new per-program API key. Returns the raw key (only shown once).
keys_revoke_keyRevoke an API key by its hash. Soft revoke — key stays in DB for audit.
keys_rotate_keyRotate the calling API key. Atomically creates a new key and grace-expires the old one (30s window).
metrics_log_rate_limit_eventLog a rate limit/throttle event from a session. Written to rate_limit_events collection with 7-day TTL.
metrics_get_rate_limit_eventsQuery rate limit events with optional period and session filtering. Returns events ordered by timestamp desc.
metrics_get_cost_forecastProject monthly spend based on current burn rate. Returns forecasted costs, daily burn rate, and top spending programs.
metrics_get_sla_complianceTrack whether tasks meet expected completion time based on priority and action type. Returns compliance rate and breach breakdown.
metrics_get_program_healthAutomated health scoring per program based on success rate, latency, error diversity, heartbeat freshness, and cost efficiency. Returns 0-100 health score with recommendations.
pattern_consolidateScan all program states for learned patterns and auto-promote patterns when N+ agents have learned the same pattern. Promoted patterns are written to GSP knowledge store with tier 'architectural' and key format 'pattern/{domain}/{slug}'. Tracks provenance (contributors, confidence, evidence count).
pattern_get_consolidatedRetrieve all consolidated/promoted patterns from the GSP knowledge store. Returns patterns grouped by domain with aggregate stats (confidence, contributor count, evidence count).
policy_createCreate a new policy. Operational-tier policies can be created directly. Constitutional-tier requires gsp_seed, architectural-tier requires gsp_propose.
policy_updateUpdate an existing operational-tier policy. Cannot update constitutional or architectural policies directly.
policy_deleteDelete an operational-tier policy. Cannot delete constitutional or architectural policies.
policy_getGet a single policy by ID.
policy_listList all policies with optional filters by tier, enforcement, or enabled status.
policy_checkCheck if a dispatch would violate any policies without creating a task. Useful for dry-run validation.
state_get_program_stateRead a program's persistent operational state. Programs can read their own state; admin/auditor can read any.
state_update_program_stateWrite a program's persistent operational state. Programs can only write their own state. Partial updates merge with existing.
state_get_context_historyQuery timestamped context snapshots (shadow journal). Returns entries newest-first. Same access rules as get_program_state.
state_store_memoryStore a learned pattern into agent memory. Upserts by pattern ID — existing patterns with the same ID are replaced.
state_recall_memoryRecall learned patterns from agent memory. Supports optional domain filter and text search (grep-style, case-insensitive substring match across pattern, evidence, and domain fields).
state_memory_healthGet memory health summary for a program. Returns pattern counts (total, active, stale, promoted), domains list, last update timestamp, and decay configuration.
state_delete_memoryDelete a learned pattern from agent memory by ID. Hard delete — pattern is removed, not just marked stale.
state_reinforce_memoryReinforce an existing memory pattern. Bumps lastReinforced timestamp, optionally updates confidence and evidence. Resets stale flag.
programs_list_programsList all registered programs for the tenant. Filterable by role, group, active status.
programs_update_programUpdate a program's metadata. Programs can update their own entry; admin can update any.
pulse_create_sessionCreate a new session to track work progress
pulse_list_sessionsList active sessions for the authenticated user
pulse_get_fleet_timelineQuery historical fleet snapshots with configurable resolution. Returns time-series data for fleet health visualization.
pulse_write_fleet_snapshotWrite a fleet health snapshot for time-series tracking. Called by the Grid Dispatcher daemon.
pulse_get_context_utilizationQuery context window utilization time-series. Returns contextHistory from session docs. If sessionId provided, returns that session; otherwise aggregates across active sessions.
pulse_pause_programPause a program's task intake. Paused programs still send heartbeats but won't receive new dispatched tasks until resumed.
pulse_resume_programResume a paused program's task intake. Re-enables dispatch of tasks to the program.
relay_list_groupsList available multicast groups and their members. Use group names as targets in send_message for multicast.
relay_send_directiveSend a directive to another program. Convenience wrapper for send_message that auto-sets message_type=DIRECTIVE and action=interrupt. Use for orchestrator→worker commands.
request_helpAsk the support team for help. Use when you're stuck or need assistance — they'll be notified and in touch shortly.
schedule_createCreate a recurring schedule: {name, target, cron, taskTemplate, budgetCap, enabled}
schedule_listList all schedules (filterable by target program, enabled status)
schedule_getGet schedule by ID with next/last run times
schedule_updateUpdate cron, budget cap, enable/disable a schedule
schedule_deleteRemove a schedule
signal_ask_questionSend a question to the user's mobile device and wait for a response
signal_get_responseCheck if the user has responded to a question
sprint_create_sprintCreate a new sprint to track parallel story execution
8 further tools are not listed here. The complete surface is in the source.
ADMIN_USER_IDAUTH_MODECACHEBASH_PROFILECACHEBASH_TENANT_IDCLOUD_RUN_URLDISPATCHER_WEBHOOK_SECRETDISPATCHER_WEBHOOK_URLDISPATCH_CALLER_BOUNDARY_TIMEOUT_MSDISPATCH_RESPONSE_RESERVE_MSFIREBASE_PROJECT_IDGCP_PROJECT_IDGITHUB_FEEDBACK_PATGITHUB_PROJECT_IDGITHUB_REPOGITHUB_REPO_NAMEGITHUB_REPO_OWNERGITHUB_TOKENGITHUB_WEBHOOK_SECRETINTERNAL_OIDC_AUDIENCELITE_URLOAUTH_ALLOWED_EMAILSOAUTH_ALLOWED_UIDSOAUTH_ISSUERREZZED_AGENT_KEYSCHEDULER_SA_EMAILWAKE_HOST_URLPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
108/108 tools missing one or more hints — dispatch_get_tasks (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); relay_get_messages (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); relay_get_dead_letters (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +105 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
No hardcoded API keys
1 live-looking API key in source: 1 Google API key
Move secrets to environment variables (process.env.X) or your secret manager.
Tool test coverage
84/108 tools referenced in tests (78%)
Write tests that reference each tool by name so every tool has at least one test.
Secrets stay with their owner
1 secret sent to a request target we could not resolve (DISPATCHER_WEBHOOK_SECRET → dynamic) — often a configured endpoint, not necessarily third-party
Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.
Secrets not logged
1 secret value sent to error
Redact or omit secret values from log output.
Domain consistency
npm scope @cachebash doesn't match GitHub owner rezzedai
Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/rezzedai/cachebash)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check