RuvNet Brain — a downloadable, source-grounded brain for Claude Code over Reuven Cohen's (rUv's) RuvNet stack: RuVector/RVF, Ruflo, AgentDB, RuLake, SPARC + 21 building blocks. Grounds Claude in real source via one MCP tool (search_ruvnet), so it builds with the stack instead of drifting off it.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
stuinfla
Source: github_topic
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
AIE_NTFY_TOPICALLOW_NO_PRIVATE_FENCEANTHROPIC_ADMIN_KEYANTHROPIC_API_KEYCE_DEBUGCE_FORCE_WORKER_FAILCE_MODELCE_PARALLEL_MINCE_WORKERSCLAUDE_BINCODEXCODEX_BINCODEX_HOMECODEX_SANDBOXCONSOLE_PORTComSpecEVAL_CONCURRENCYGEMINI_API_KEYGH_BINGH_TOKENGITHUB_ACTIONSGITHUB_RUN_ATTEMPTGITHUB_RUN_IDGITHUB_TOKENGITHUB_WORKFLOWGOOGLE_API_KEYGSC_ACCESS_TOKENGUARD_INJECTION_LOGISSUE_FIX_COOLDOWN_HOURSISSUE_FIX_FAILED_RETRY_HOURSISSUE_FIX_GRACE_MSISSUE_FIX_LOCKISSUE_FIX_LOG_DIRISSUE_FIX_MAX_FAILED_ATTEMPTSISSUE_FIX_MAX_PER_RUNISSUE_FIX_MAX_TURNSISSUE_FIX_MODELISSUE_FIX_TIMEOUT_MSISSUE_FIX_WORKTREE_DIRISSUE_WATCH_STATEJOB_HEARTBEAT_DIRKB_CE_CASCADE_KKB_CE_CASCADE_TOKENSKB_CE_MAX_PAIRSKB_CE_TRACEKB_CONCURRENCYKB_DEBUGKB_DIRKB_HYBRIDKB_MODEL_CACHEexport =/path/to/models-cacheKB_NAMEKB_REPOSKB_REPO_ROOTKB_TRANSCRIPT_STORESMEMORY_DBMETAHARNESS_RECEIPTSMETAHARNESS_SCRIPTS_DIRMODEL_ROUTER_CATALOGMODEL_ROUTER_DECISIONSMODEL_ROUTER_OUTCOMESMODEL_ROUTER_PROFILENTFY_TOPICOPENAI_API_KEYOPENROUTER_API_KEYRECONCILE_STAMPRUVNET_AGGREGATE_ENVELOPERUVNET_BIG_SHARDSRUVNET_BRAIN_CALL_TIMEOUT_MSRUVNET_BRAIN_CHILD_IDLE_MSRUVNET_BRAIN_CHILD_MCPRUVNET_BRAIN_COMPLETE_SOURCERUVNET_BRAIN_EVIDENCERUVNET_BRAIN_FETCH_TIMEOUT_MSRUVNET_BRAIN_HOMERUVNET_BRAIN_IDLE_EXIT_MSRUVNET_BRAIN_IMPORT_ONLYRUVNET_BRAIN_INIT_TIMEOUT_MSRUVNET_BRAIN_KBRUVNET_BRAIN_METERRUVNET_BRAIN_NO_UPDATE_FALLBACKRUVNET_BRAIN_PING_URLRUVNET_BRAIN_PROJECT_DIRRUVNET_BRAIN_STATE_DIRRUVNET_BRAIN_TESTRUVNET_BRAIN_TEST_LATEST_TAGRUVNET_CANDIDATE_PAYLOADRUVNET_CANDIDATE_PAYLOAD_SIGNATURERUVNET_CANDIDATE_RECEIPTRUVNET_CANONICAL_URLRUVNET_CAPABILITY_STATE_LOGRUVNET_CLAUDE_BINRUVNET_CLAUDE_MARKETPLACE_SOURCERUVNET_CODEX_BINRUVNET_CODEX_HOOK_TRUST_MODERUVNET_CONSOLE_DISABLE_BACKGROUND_REFRESHRUVNET_ENV_FILERUVNET_EVIDENCE_FILERUVNET_GISTS_APIRUVNET_KNOWN_CLONESRUVNET_LEARNING_SCOPERUVNET_LESSON_STORERUVNET_MODEL_CATALOGRUVNET_NPM_VISIBILITY_ATTEMPTSRUVNET_NPM_VISIBILITY_TIMEOUT_MSRUVNET_PUBLICATION_RECEIPTRUVNET_RELEASE_ASSET_TIMEOUT_MSRUVNET_REPORUVNET_RUFLO_BINRUVNET_SIGNING_KEYRUVNET_SIGNING_KEY_FILERUVNET_STRICT_INSTALLRUVNET_UPGRADE_NOTICE_FILERVF_MODULE_PATHSPEND_ALERT_USDSPEND_BURST_AGENTSSPEND_SCAN_ROOTSWATCHDOG_REGISTRYWATCHDOG_STATEXAI_API_KEYXDG_CACHE_HOMEXENOVA_PATHDependencies
7 dependencies, 1 flagged: playwright
Tool annotations
2/4 tools have annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
4/4 tools missing one or more hints — search_ruvnet (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); search_kb (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ruvnet_cli_help (missing: openWorldHint), +1 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tests exist
No test files found
Add tests that exercise each declared tool.
Shell command execution
39 child_process/subprocess calls in production code — runs shell commands (plugin/mcp/server.mjs:189, plugin/mcp/managed-cli-interface.mjs:160, bin/api-spend-watchdog.mjs:95)
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
Secrets stay with their owner
2 secret/sensitive values flow into network calls (GSC_ACCESS_TOKEN → searchconsole.googleapis.com, RUVNET_GISTS_API → dynamic) (1 other flows matched canonical API hosts)
Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.
Secrets not written to files
3 secret values written to files
Avoid persisting secrets to disk. Keep them in memory or your secret manager.
Secrets not logged
5 secret values sent to console.log
Redact or omit secret values from log output.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/stuinfla-ruvnet-brain-gp2fyt)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check