SINT Protocol

Security-enforcing MCP proxy that sits between an AI agent and any number of downstream MCP servers, intercepting every tool call through a capability-token policy gateway that can allow, deny, or escalate to human approval before the call reaches any real tool. It also exposes built-in operator tools for approval workflows, audit trail queries, token management, voice/HUD output, and hierarchical

→ sint-ai/sint-protocol · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 1 critical

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 3 credentials: SINT_AGENT_PRIVATE_KEY, SINT_API_KEY, SINT_WS_ALLOW_QUERY_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configDATABASE_URL

configMODEL

configOPENAI_MODEL

configPAPERCLIP_AGENT_ID

configPAPERCLIP_RUN_ID

configPAPERCLIP_TASK_ID

configPORT

configREDIS_URL

🔐 secretSINT_AGENT_PRIVATE_KEY

🔐 secretSINT_API_KEY— railway variables --set SINT_STORE=postgres SINT_CACHE=redis =$(openssl rand -hex 32)

configSINT_CACHE— railway variables --set SINT_STORE=postgres =redis SINT_API_KEY=$(openssl rand -hex 32)

configSINT_MCP_APPROVAL_TIMEOUT

configSINT_MCP_CONFIG

configSINT_MCP_POLICY

configSINT_MCP_PORT

configSINT_MCP_TRANSPORT

configSINT_PORT

configSINT_RATE_LIMIT

configSINT_REQUIRE_SIGNATURES

configSINT_SESSION_ID

configSINT_STORE— railway variables --set =postgres SINT_CACHE=redis SINT_API_KEY=$(openssl rand -hex 32)

configSINT_TRAJECTORY_DIR

🔐 secretSINT_WS_ALLOW_QUERY_API_KEY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sint-ai-sint-protocol-1gkgbr)](https://m8ven.ai/mcp/sint-ai-sint-protocol-1gkgbr)

commit: d16d7381e700fb04612a383af9dd85aa43c94291

code hash: b7ab3ed656520e698d02bd9c96b95c079ae7472503e38d716b12aadd8ecf5109

verified: 4/18/2026, 6:19:31 PM

view raw JSON →