Back to MCP Trust Indexm8ven
39
/ 100
1 month ago
glama

mcp_arena

A production-ready Python library for building MCP servers with agent orchestration and domain-specific presets for platforms like GitHub, Slack, and Notion.

→ SatyamSingh8306/mcp_arena· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — get_ffmpeg_info (line 285: result = subprocess.run()
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 15 credentials: BITBUCKET_APP_PASSWORD, BITBUCKET_OAUTH_KEY, BITBUCKET_OAUTH_SECRET, AWS_SECRET_ACCESS_KEY, CONFLUENCE_PASSWORD, GITHUB_TOKEN, GITLAB_PRIVATE_TOKEN, GITLAB_OAUTH_TOKEN, JIRA_PASSWORD, SMTP_PASSWORD, TWILIO_AUTH_TOKEN, SLACK_BOT_TOKEN, NOTION_TOKEN, SLACK_TOKEN, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBITBUCKET_USERNAME
🔐 secretBITBUCKET_APP_PASSWORD
🔐 secretBITBUCKET_OAUTH_KEY
🔐 secretBITBUCKET_OAUTH_SECRET
configAWS_ACCESS_KEY_ID
🔐 secretAWS_SECRET_ACCESS_KEY
configS3_BUCKET_NAME
configGCS_PROJECT_ID
configGCS_BUCKET_NAME
configGOOGLE_APPLICATION_CREDENTIALS
configCONFLUENCE_USERNAME
🔐 secretCONFLUENCE_PASSWORD
🔐 secretGITHUB_TOKEN
🔐 secretGITLAB_PRIVATE_TOKEN
🔐 secretGITLAB_OAUTH_TOKEN
configJIRA_USERNAME
🔐 secretJIRA_PASSWORD
configGMAIL_CREDENTIALS_PATH
configMONGODB_CONNECTION_STRING
configSMTP_HOST
configSMTP_USERNAME
🔐 secretSMTP_PASSWORD
configTWILIO_ACCOUNT_SID
🔐 secretTWILIO_AUTH_TOKEN
configTWILIO_PHONE_NUMBER
🔐 secretSLACK_BOT_TOKEN
🔐 secretNOTION_TOKEN
configPOSTGRES_CONNECTION_STRING
🔐 secretSLACK_TOKEN
🔐 secretOPENAI_API_KEY
configTWILIO_WHATSAPP_NUMBER
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/satyamsingh8306-mcp-arena-yeod40)](https://m8ven.ai/mcp/satyamsingh8306-mcp-arena-yeod40)
commit: 6213ea3186871a17e8e3d3ffca86033e7724f824
code hash: e4da689cefd21ddf63561e35b2a7f6ba5b40f4f8f1e6d04612763939555e017c
verified: 6/18/2026, 10:48:26 AM
view raw JSON →