Xray MCP Server

Manages Xray test cases, executions, and reports through natural language commands.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: XRAY_CLIENT_SECRET. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 1 credential: XRAY_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_HOSTS— No localhost:<PORT>,127.0.0.1:<PORT> Comma-separated allowed Host headers. Set to your domain when deploying remotely.

configHOST— No 127.0.0.1 Bind address. Set to 0.0.0.0 when running behind a reverse proxy.

configMAX_SESSIONS— No 100 Max concurrent MCP sessions before new ones are rejected with 503.

configPORT— No 3000 HTTP server port (HTTP transport only)

configSESSION_IDLE_MS— No 1800000 (30 min) Idle time before a session is swept and closed.

configTRUST_PROXY— No 0 Reverse-proxy hops to trust for real client IP. Set to 1 behind nginx/Caddy.

configXRAY_CLIENT_ID— Edit .env.local and fill in and XRAY_CLIENT_SECRET

🔐 secretXRAY_CLIENT_SECRET— Edit .env.local and fill in XRAY_CLIENT_ID and

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/samtheiii-xray-mcp-1tbjtm)](https://m8ven.ai/mcp/samtheiii-xray-mcp-1tbjtm)

commit: 2b7150b6b4e05b098c4b6863c0865f95798cda6f

code hash: 8dafab7262dc7958b0aded45b38f070de95dd76e3671d017879e86705e8fc438

verified: 6/23/2026, 10:30:40 AM

view raw JSON →