73
/ 100
22 days ago
glama

Clearfront MCP Server

Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 15 credentials: ANTHROPIC_API_KEY, OPENAI_API_KEY, SERPER_API_KEY, BRIGHTDATA_API_KEY, ABUSEIPDB_API_KEY, HIBP_API_KEY, CENSYS_SECRET, EMAILREP_API_KEY, IP2LOCATION_API_KEY, GITHUB_TOKEN, GREYNOISE_API_KEY, IPINFO_TOKEN, SHODAN_API_KEY, VIRUSTOTAL_API_KEY, GOOGLE_MAPS_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretANTHROPIC_API_KEYAI agent Yes (or use Ollama / OpenAI) Anthropic API key
🔐 secretOPENAI_API_KEYAI agent Optional API key for the OpenAI-compatible endpoint (local servers may ignore it)
configOPENAI_BASE_URLopenai-base-url URL OpenAI-compatible endpoint base URL (env: )
configOPENAI_MODELAI agent Optional Model name to request from the endpoint (default: gpt-4o-mini)
🔐 secretSERPER_API_KEYsearch_dorks_live, search_footprint Optional Serper.dev Google SERP API, the preferred SERP backend (~$1/1k, 2,500 free), [get one](https://serper.dev).
🔐 secretBRIGHTDATA_API_KEYsearch_dorks_live, scrape_url Optional Bright Data API key, [get one](https://get.brightdata.com/8ygvxztgo5dr) (free tier: 5,000 req/month).
configBRIGHTDATA_SERP_ZONEsearch_dorks_live Optional Your Bright Data SERP API zone name (e.g. serp_api1).
configBRIGHTDATA_UNLOCKER_ZONEscrape_url Optional Your Bright Data Web Unlocker zone name (e.g. web_unlocker1).
🔐 secretABUSEIPDB_API_KEYsearch_abuseipdb Optional AbuseIPDB v2, [get one](https://www.abuseipdb.com/account/api)
🔐 secretHIBP_API_KEYsearch_breach Optional HaveIBeenPwned v3, [get one](https://haveibeenpwned.com/API/Key)
configCENSYS_PAT+ CENSYS_ORG_ID search_censys Optional Censys Platform API: Personal Access Token + Organization ID, [get one](https://platform.censys.io)
🔐 secretCENSYS_SECRET
configCENSYS_ORG_IDCENSYS_PAT + search_censys Optional Censys Platform API: Personal Access Token + Organization ID, [get one](https://platform.censys.io)
🔐 secretEMAILREP_API_KEY
🔐 secretIP2LOCATION_API_KEYsearch_ip2location Optional IP2Location.io enhanced IP intelligence, [get one](https://www.ip2location.io/pricing)
🔐 secretGITHUB_TOKENsearch_github Optional GitHub API, raises rate limit from 60 to 5000 req/h, [get one](https://github.com/settings/tokens)
🔐 secretGREYNOISE_API_KEY
🔐 secretIPINFO_TOKENsearch_ip Optional ipinfo.io higher rate limits
🔐 secretSHODAN_API_KEYsearch_shodan Optional Shodan API, [get one](https://account.shodan.io)
🔐 secretVIRUSTOTAL_API_KEYsearch_virustotal Optional VirusTotal API v3, [get one](https://www.virustotal.com/gui/my-apikey)
configANTHROPIC_MODEL
configOLLAMA_HOST
configOIS_MAX_TOOL_ROUNDS
🔐 secretGOOGLE_MAPS_API_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/scottmartinanderson-clearfront-7gsz8d)](https://m8ven.ai/mcp/scottmartinanderson-clearfront-7gsz8d)
commit: 90387c31ff418b2956b46c75ddf62f098a2b2fd1
code hash: c8109055241fcd785cfd57cb122d1db4a1e65647a19611c1814d3f04100e8770
verified: 7/9/2026, 9:58:35 AM
view raw JSON →