grade C

2 days ago

npm

eriknewton/sanctuary-framework

Sanctuary Framework MCP Server — sovereignty infrastructure for agent harnesses

→ eriknewton/sanctuary-framework· npm: @sanctuary-framework/mcp-server· listed on npm

Install from

npm npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: SANCTUARY_DASHBOARD_AUTH_TOKEN, SANCTUARY_DASHBOARD_TLS_KEY, SANCTUARY_RECOVERY_KEY, SANCTUARY_WEBHOOK_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPP_SANDBOX_READ_ONLY_HOME

configCONTAINER_ID

configDOCKER_HOST

configGENERATE_EXAMPLE

configSANCTUARY_AGENT_ID

configSANCTUARY_AUTO_PUBLISH_HANDSHAKES

configSANCTUARY_AUTO_PUBLISH_TO_VERASCORE

🔐 secretSANCTUARY_DASHBOARD_AUTH_TOKEN

configSANCTUARY_DASHBOARD_AUTO_OPEN

configSANCTUARY_DASHBOARD_ENABLED

configSANCTUARY_DASHBOARD_HOST

configSANCTUARY_DASHBOARD_MODE

configSANCTUARY_DASHBOARD_PORT

configSANCTUARY_DASHBOARD_TLS_CERT

🔐 secretSANCTUARY_DASHBOARD_TLS_KEY

configSANCTUARY_HTTP_PORT

configSANCTUARY_IDENTITY_ID

configSANCTUARY_MULTI_DASHBOARD

configSANCTUARY_MULTI_DASHBOARD_PORT

configSANCTUARY_NO_REP

configSANCTUARY_NO_UPDATE_CHECK

configSANCTUARY_PASSPHRASE— openclaw mcp set sanctuary '{"command":"npx","args":["@sanctuary-framework/mcp-server"],"env":{"":"your-passphrase-here"}}'

🔐 secretSANCTUARY_RECOVERY_KEY

configSANCTUARY_STORAGE_PATH

configSANCTUARY_TEE

configSANCTUARY_TRANSPORT

configSANCTUARY_VERASCORE_URL

configSANCTUARY_WEBHOOK_CALLBACK_HOST

configSANCTUARY_WEBHOOK_CALLBACK_PORT

configSANCTUARY_WEBHOOK_ENABLED

🔐 secretSANCTUARY_WEBHOOK_SECRET

configSANCTUARY_WEBHOOK_URL

configVERASCORE_URL

configVITEST

configcontainer

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sanctuary-framework-mcp-server-u1kiw6)](https://m8ven.ai/mcp/sanctuary-framework-mcp-server-u1kiw6)

commit: 2527cd30719450da4c4e4384e0a2e88164a6940c

code hash: b87fa7e8be00d3fd650a62e9a1876a9277706dab4929beca4ff1538889323436

verified: 4/18/2026, 4:08:18 PM

view raw JSON →