An MCP server that provides tools for privacy-oriented context API including encrypted fact storage, commitment-based proofs, and semantic search, enabling users, AI agents, and back-office systems to securely manage and prove personal facts without exposing raw data.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
process.env. You'll be asked to provide them before it can run.BASE_URLNEXT_PUBLIC_SITE_URLNEXT_PUBLIC_SUPABASE_ANON_KEYNEXT_PUBLIC_SUPABASE_URLOPENAI_API_KEYOPENAI_CHAT_MODELOPENAI_EMBEDDING_MODELOPENROUTER_API_KEYOPENROUTER_APP_TITLEOPENROUTER_CHAT_MODELOPENROUTER_EMBEDDING_MODELOPENROUTER_HTTP_REFERERSTRIPE_PRICE_ENTERPRISESTRIPE_PRICE_PROSTRIPE_PRICE_STARTERSTRIPE_SECRET_KEYSTRIPE_WEBHOOK_SECRETSUPABASE_SERVICE_ROLE_KEYTEST_BASE_URLUPSTASH_REDIS_REST_TOKEN— Upstash Redis is configured (UPSTASH_REDIS_REST_URL + ); the in-process rate-limit fallback is for local development only.UPSTASH_REDIS_REST_URL— Upstash Redis is configured ( + UPSTASH_REDIS_REST_TOKEN); the in-process rate-limit fallback is for local development only.ZKSHARE_API_KEY— "": "zk_live_…",ZKSHARE_API_URL— "": "https://zkshare.io"ZKSHARE_CORS_ORIGIN— is an explicit comma-separated allow list of origins. is for unauthenticated demos only.ZKSHARE_DISABLE_EXTERNAL_LLMZKSHARE_ENCLAVE_JWT_SECRET— HS256 secret for sandbox attestations (minimum 32 characters).ZKSHARE_ENCLAVE_PUBLIC_KEY_STUBZKSHARE_ENCRYPTION_SECRET— server-side AES-256-GCM master secret (scrypt-derived; minimumZKSHARE_OPENROUTER_DENY_DATA_COLLECTIONZKSHARE_PROOF_SECRET— HMAC secret for commitments and proof envelopes (minimum 16ZKSHARE_TEST_API_KEY[](https://m8ven.ai/mcp/sp0oby-zkshare-fyv8nd)