Cityflo OTP MCP (Sonu0305/cityflo-otp-mcp) is an MCP server listed on the M8ven Trust Index. It scores 89 out of 100, grade B. It declares 3 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Back to MCP Trust IndexM8ven
B
Emerging
89/100
1 day ago

Cityflo OTP MCP

Provides on-time performance analysis for Mumbai North bus routes via tools for route summaries, late trip drill-down, and data quality reports. It quarantines invalid data and surfaces policy questions instead of hidden normalizations.

→ Sonu0305/cityflo-otp-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code VerifiedSandbox Verified⚡ Live Monitored

Monitored 19 days · every push re-verified

Who stands behind it

gmail.com (@Sonu0305) · Verified Publisher

Source: Glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Are you the publisher? Confirm or correct these findings.
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

3/3 tools missing one or more hints — route_otp_summary (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_late_trips (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); data_quality_report (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint). OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/sonu0305/cityflo-otp-mcp)](https://m8ven.ai/mcp/sonu0305/cityflo-otp-mcp)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 19465a5a18f58e65c8149d0106018d056945d78d
code hash: 56a44026d1ae049c233dc4ff93fe3a7260881516610768fd90d1674b7b7789ef
verified: 9/8/2026, 8:40:42 PM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client