45
/ 100
1 month ago
glama
Caplets
A progressive-disclosure gateway for MCP servers that keeps tool lists small by exposing one top-level tool per server, allowing agents to search, list, inspect, and call underlying tools within a selected domain.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: ALCHEMY_PASSWORD, CAPLETS_SECRET_REVIEW_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
ALCHEMY_PASSWORD🔐 secret
CAPLETS_SECRET_REVIEW_TOKENconfig
GITHUB_REPOSITORYconfig
GITHUB_REPOSITORY_NAMEconfig
GITHUB_REPOSITORY_OWNERconfig
GITHUB_SHAconfig
PULL_REQUESTconfig
SSH_CONNECTION// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/spiritledsoftware-caplets-1ehkb9)commit: 17a6a4b7a256a247010640f7f06bfde7a6b402b3
code hash: 83f2e0ee36e9f7c3c40e114aa8fa843ee6877d46cd5f643d2f21dc320aebb2fa
verified: 6/11/2026, 11:07:06 AM