Back to MCP Trust Indexm8ven
54
/ 100
1 month ago
glama

AskMeMCP

Enables AI assistants to request human input through a web interface during execution. Supports single questions, multiple choice selections, hypothesis challenges, and decision workflows for human-in-the-loop interactions.

→ roman-vm/ask-me-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 21 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// known CVEs in dependencies21 high4 medium7 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@angular/common@20.0.0GHSA-39pv-4j6c-2g6v

@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

high@angular/common@20.0.0GHSA-48r7-hpm6-gfxm

@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

high@angular/common@20.0.0GHSA-58c5-g7wp-6w37

Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client

high@angular/common@20.0.0GHSA-p3vc-36g9-x9gr

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

high@angular/common@20.0.0GHSA-q6f4-qqrg-jv6x

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configASK_ME_MCP_DEBUG— 1 claude --debug
configBASE_URL
configGITHUB_ACTIONS
configTEST_WORKER_INDEX
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/roman-vm-ask-me-mcp-1ns6gk)](https://m8ven.ai/mcp/roman-vm-ask-me-mcp-1ns6gk)
commit: 73c98e36311b9e8b7db09225a5358ede1f282b1c
code hash: e0157840d3471dc676b5c0bc44b72f2c6d0892a2c5d464a03b66957e7273997c
verified: 6/17/2026, 12:32:40 PM
view raw JSON →