EAGV2 (shaikkamran/EAGV2) is an MCP server listed on the M8ven Trust Index. It scores 0 out of 100, grade F. It declares 133 tools. No publisher has claimed this listing.

Warning

0/100

EAGV2

Item: EAGV2
Rating: 0
Author: M8ven

EAG V2 (Agentic AI) From the The School of AI

→ shaikkamran/EAGV2 · listed on github_code

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

shaikkamran

Source: github_code

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

🚨

Hardcoded credentials detected

1 live-looking API key in source: 1 Google API key

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — keyword_search (line 638: result = subprocess.run(cmd, capture_output=True, text=True))

🔐

You'll be asked for 1 credential: GEMINI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes46 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

add

Add two numbers

add_list

Add all numbers in a list

subtract

Subtract two numbers

multiply

Multiply two numbers

divide

Divide two numbers

power

Power of two numbers

sqrt

Square root of a number

cbrt

Cube root of a number

factorial

factorial of a number

log

log of a number

remainder

remainder of two numbers divison

sin

sin of a number

cos

cos of a number

tan

tan of a number

mine

special mining tool

create_thumbnail

Create a thumbnail from an image

strings_to_chars_to_int

Return the ASCII values of the characters in a word

int_list_to_exponential_sum

Return sum of exponentials of numbers in a list (formatted to 2 decimal places)

fibonacci_numbers

Return the first n Fibonacci Numbers

open_preview_with_pdf

Create a new PDF for drawing and open it in Preview

draw_rectangle

Draw a rectangle directly on the PDF from (x1,y1) to (x2,y2)

add_text_in_preview

Add text directly to the PDF at specified coordinates

save_pdf

Save the current PDF (already saved automatically)

search_stored_documents_rag

Search old stored documents like PDF, DOCX, TXT, etc. to get relevant extracts.

convert_webpage_url_into_markdown

Return clean webpage content without Ads, and clutter.

extract_pdf

Convert PDF to markdown.

duckduckgo_search_results

Search DuckDuckGo.

download_raw_html_from_url

Fetch webpage content.

no_input

Doesn't take any input.

dynamic_tool_256

web_search

Search the web using multiple engines (DuckDuckGo, Bing, Ecosia, etc.) and return a list of relevant result URLs

web_extract_text

Extract readable text from a webpage using robust methods (Playwright/Trafilatura).

search_web_with_text_content

Search web and return URLs with extracted text content. Gets both URLs and readable text from top search results. Ideal for exhaustive research.

fetch_search_urls

Get top website URLs for your search query. Just gets the URLs not the contents.

webpage_url_to_raw_text

Extract readable text from a webpage.

browser_use_action

Execute a complex browser task using Vision and generic reasoning. Use this for: Logging in, filling forms, navigating complex sites, or when text search fails. WARNING: Slow and expensive.

preview_document

Preview a document using the AI-enhanced extraction logic used for indexing.

ask_document

Ask a question about a specific document. Incorporates chat history, relevant document extracts, and optional image input.

keyword_search

Search for exact keyword matches across all indexed document chunks. Returns a list of document paths that contain the matching text.

advanced_ripgrep_search

Powerful regex/keyword search using Ripgrep. Returns structured results with file, line number, and match content. Set regex=True for pattern matching (e.g. r"error:.*"). Optionally provide target_dir to search within a specific subdirectory of data/.

reindex_documents

Trigger a manual re-index of the RAG documents. Optionally provide a target_path (relative to data/ folder) to index a specific file. If force is True, it wipes the index and performs a full fresh scan.

get_indexing_status

Get the current indexing progress status as JSON.

index_images

Background Worker: Scans for un-captioned images, captions them using Vision Model, and updates the index.

run_python_script

Execute Python code in a secure sandbox. Use this for math, data processing, and logic. Returns the stdout and result of the execution.

add_text_in_paint

Add text in Paint

open_paint

Open Microsoft Paint maximized on secondary monitor

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretGEMINI_API_KEY

configSHELL

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

133/133 tools missing one or more hints — add (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); add_list (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); subtract (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +130 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Destructive tools are labelled

1 tool perform destructive updates without destructiveHint — reindex_documents deletes at line 1600 (path.unlink())

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

Descriptions match behaviour

1 tool describes read intent but its handler mutates — keyword_search (line 638: result = subprocess.run(cmd, capture_output=True, text=True))

Rename the tool, rewrite the description, or move the side-effect into a separate clearly-named tool.

Tool inputs are validated

131/132 tool handlers declare input schemas (99%)

Declare an inputSchema with zod/joi/yup on every tool definition.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

No hardcoded API keys

1 live-looking API key in source: 1 Google API key

Move secrets to environment variables (process.env.X) or your secret manager.

Tool test coverage

Only 8/133 tools referenced in tests (6%)

Write tests that reference each tool by name so every tool has at least one test.

Secrets not logged

60 secret values sent to print

Redact or omit secret values from log output.

Tool description accuracy

keyword_search: description implies read-only but handler writes/deletes/executes

Update tool descriptions to accurately reflect all capabilities — especially write, delete, or execute operations.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 10 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/shaikkamran/eagv2?variant=verified)](https://m8ven.ai/mcp/shaikkamran/eagv2)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: d617161b93193acaff149dc7170924797b2b58a3

code hash: 71a2be35f09483e9123d796856e9265b57542eadb770ddc743d8b6be0ef7e7c2

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client