Sugra API

Gateway between LLM agents and world data through eight tools and a bundled endpoint catalog.

→ Sugra-Systems/prod-sugra-ai-MCP· pypi: sugra-api-mcp· listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: ANTHROPIC_API_KEY, SUGRA_TEST_API_KEY, SUGRA_API_KEY, INTERNAL_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configEVAL_MODEL

configEVAL_JUDGE_MODEL

🔐 secretANTHROPIC_API_KEY

configSUGRA_MCP_URL

configSUGRA_EVAL_CALL_TIMEOUT

🔐 secretSUGRA_TEST_API_KEY

🔐 secretSUGRA_API_KEY— "": "sugra_xxx_yourkey..."

configSUGRA_API_BASE— No https://sugra.ai Override for self-hosted or beta environments

configSUGRA_TIMEOUT— No 30 Request timeout in seconds

configSUGRA_APP_URL— HTTP + OAuth https://app.sugra.ai Base URL of the authorization server

configSUGRA_JWKS_URL— No $SUGRA_APP_URL/oauth/jwks.json JWKS endpoint

🔐 secretINTERNAL_API_TOKEN— HTTP + OAuth - Shared secret for the user lookup and MCP activity endpoints on the authorization server. Same value must be set on both the MCP process and the app.sugra.ai Laravel process

configSUGRA_MCP_ALLOWED_ORIGINS

configAPPLICATIONINSIGHTS_CONNECTION_STRING

configSUGRA_MCP_ALLOWED_HOSTS— No (HTTP) - Comma-separated hostnames to allow behind a reverse proxy

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sugra-api-mcp-1ktws4)](https://m8ven.ai/mcp/sugra-api-mcp-1ktws4)

commit: 6b9aae1791225fca35bde02e07c961e2e4bee480

code hash: 84187ceec2db9c464a4ab5f7365c8e5bb37182befbcfefb1e0cd5e6cba9006e1

verified: 6/22/2026, 12:22:03 PM

view raw JSON →