Governance control plane for multi-agent AI — policy-gated MCP tool execution, approval workflows, budget caps, durable Postgres job queue with crash recovery. TypeScript · Next.js · Prisma
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
shubhamjoshipromail-svg
Source: github_code
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Next.js: Server-Side Request Forgery in Server Actions on custom servers
Next.js: Denial of Service in App Router using Server Actions
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
ANTHROPIC_API_KEYANTHROPIC_MODELAUTH_SECRET"test-secret"AUTH_URL"http://localhost:3000"CALENDAR_MCP_ARGSCALENDAR_MCP_COMMANDCREDENTIAL_ENCRYPTION_KEYDOCS_MCP_ARGSDOCS_MCP_COMMANDFOUNDER_EMAILSGMAIL_ACCESS_TOKENGMAIL_MCP_ARGSGMAIL_MCP_COMMANDGOOGLE_ACCESS_TOKENGOOGLE_CLIENT_IDGOOGLE_CLIENT_SECRETNEXTAUTH_SECRETNEXTAUTH_URLOPENAI_API_KEYOPENAI_MODELOPENROUTER_API_KEYOPENROUTER_MODELOPENROUTER_SITE_NAMEOPENROUTER_SITE_URLORCHESTRATOR_PROVIDERSEARCH_MCP_ARGSSEARCH_MCP_COMMANDWORKER_LEASE_MSjob lease duration (default: 60000)WORKER_PER_USER_CONCURRENCYmax concurrent runs per user (default: 1)WORKER_POLL_MSpoll interval when idle (default: 2000)DATABASE_URLTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
5/5 tools missing one or more hints — list_events (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_event (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); create_draft (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +2 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
3/5 tool handlers declare input schemas (60%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool handlers catch errors
Only 0/5 tool handlers wrap calls in try/catch (0%)
Wrap each tool handler body in try/catch and return a structured error response.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tool test coverage
3/5 tools referenced in tests (60%)
Write tests that reference each tool by name so every tool has at least one test.
Shell command execution
5 child_process calls — runs shell commands
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
Production dependencies are patched
1 critical, 5 high severity in production deps — next-auth@4.24.14 (critical), next@16.2.6 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/shubhamjoshipromail-svg-agentdock-1twms9)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check