Emerging

74/100

7 days ago

trmm-mcp

Item: trmm-mcp
Rating: 74
Author: M8ven

MCP server that gives AI assistants read-only access to TacticalRMM fleet data (agents, checks, alerts, services, processes, etc.) and, with explicit approval, lets them run commands on managed machines.

→ shin2344234/trmm-mcp · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

shin2344234

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 6 credentials: TRMM_APPROVAL_SETUP_PASSWORD, TRMM_READONLY_API_KEY, TRMM_COMMAND_API_KEY, TRMM_MCP_APPROVAL_TOTP_SECRET, TRMM_MCP_TLS_KEY, TRMM_MCP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configTRMM_MCP_VERIFY_URL

configTRMM_MCP_VERIFY_HOST

🔐 secretTRMM_APPROVAL_SETUP_PASSWORD

configTRMM_MCP_MODEreadonly readonly, elevate or command

configTRMM_API_URLBackend base URL

🔐 secretTRMM_READONLY_API_KEYKey used in read-only mode

🔐 secretTRMM_COMMAND_API_KEYKey used for executions in elevate and command modes

configTRMM_MCP_STATE_DIR./state Where grants are persisted

configTRMM_MCP_PENDING_TTL600 Seconds an unapproved request stays open

configTRMM_MCP_MAX_GRANT_SECONDS3600 Ceiling on any approval window

configTRMM_MCP_APPROVAL_PASSWORD_HASHunset PBKDF2 hash; set by setup_approval_auth.py

🔐 secretTRMM_MCP_APPROVAL_TOTP_SECRETunset Base32 TOTP secret; set by the same script

configTRMM_MCP_APPROVAL_SESSION43200 Approval-page session lifetime, seconds

configTRMM_MCP_APPROVAL_MAX_ATTEMPTS5 Failed sign-ins before lockout

configTRMM_HTTP_TIMEOUT60 Connect/write timeout, seconds

configTRMM_HTTP_READ_TIMEOUT300 Read timeout — must exceed the longest tool timeout, since synchronous runs hold the connection open

configTRMM_MCP_TRANSPORTstdio stdio or streamable-http

configTRMM_MCP_HTTP_HOST/ _PORT / _PATH 127.0.0.1 / 8770 / /mcp HTTP listener

configTRMM_MCP_HTTP_PORT

configTRMM_MCP_HTTP_PATH

configTRMM_MCP_TLS_CERT

🔐 secretTRMM_MCP_TLS_KEY

🔐 secretTRMM_MCP_AUTH_TOKENheader "Authorization: Bearer <>" --scope user

configTRMM_MCP_ALLOWED_HOSTS

configTRMM_CA_BUNDLE/opt/trmm-certs/fullchain.pem CA for the self-signed origin cert

configTRMM_MCP_MAX_RESPONSE_CHARS60000 Truncation cap per tool result

configTRMM_MCP_AUDIT_LOG./command-audit.log Mutation log path

configTRMM_MCP_LOG_DIR./logs Where events.jsonl and server.log live

configTRMM_MCP_LOG_LEVELINFO Diagnostic verbosity

configTRMM_MCP_LOG_MAX_BYTES/ _BACKUPS 10485760 / 5 Rotation

configTRMM_MCP_LOG_BACKUPS

configTRMM_MCP_LOG_PAYLOAD_CHARS(default 4000, -1 for everything, 0 to record

configTRMM_MCP_AGENT_ALLOWLISTOptional agent allowlist: set to a comma-separated

configTRMM_MCP_BLOCK_PATTERNS(set empty to disable).

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

28/28 tools missing one or more hints — trmm_fleet_overview (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); trmm_list_agents (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); trmm_get_agent (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +25 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

14/28 tools referenced in tests (50%)

Write tests that reference each tool by name so every tool has at least one test.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/shin2344234-trmm-mcp-m4g6wt)](https://m8ven.ai/mcp/shin2344234-trmm-mcp-m4g6wt)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 346b94b19e973d6e8942f8d8ae20340cfe401544

code hash: cd07a4199d3f1fff1119af1c508d164dd14d9e980ca633ce31025602fc8d136c

verified: 8/14/2026, 9:48:38 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client