/ 100

1 month ago

glama

Swarmwage

Item: Swarmwage
Rating: 45
Author: M8ven

MCP server exposing the Swarmwage agent hire protocol as tools for any MCP-compatible AI agent (Claude Desktop, Claude Code, Cursor, Cline, etc.)

→ Swarmwage/swarmwage · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 8 credentials: ANTHROPIC_API_KEY, APIFY_API_TOKEN, BUYER_PRIVATE_KEY, FAL_API_KEY, GROQ_API_KEY, SELLER_PRIVATE_KEY, SWARMWAGE_BUDGET_TOKEN, SWARMWAGE_PRIVATE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.1.0GHSA-hcf7-66rw-9f5r

Trubo: Login callback CSRF/session fixation

lowturbo@2.1.0GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAGENT_TELEMETRY

configALLOW_PRIVATE_FETCH

🔐 secretANTHROPIC_API_KEY

configANTHROPIC_MODEL

🔐 secretAPIFY_API_TOKEN

configAPIFY_TIMEOUT_MS

configAUDIO_URL

🔐 secretBUYER_PRIVATE_KEY

configCAPABILITY

configCHART_DATA

configCHART_THEME

configCHART_TITLE

configCHART_TYPE

configCODE

configDATABASE_URL

configEST_UPSTREAM_USD_PER_CALL

configEXTRACT_FIELDS

configEXTRACT_MAX_KB

configEXTRACT_URL

configFACILITATOR_URL

🔐 secretFAL_API_KEY

configFAL_MODEL

configFAL_TIMEOUT_MS

configFETCH_TIMEOUT_MS

🔐 secretGROQ_API_KEY

configGROQ_MODEL

configGROQ_TIMEOUT_MS

configHEIGHT

configHIRE_RATE_LIMIT_PER_IP

configHIRE_RATE_WINDOW_MS

configLIVE_SELLER_ADDRESS

configMAX_AUDIO_MB

configMAX_DAILY_HIRES

configMAX_DAILY_SPEND_USD

configMAX_HEIGHT

configMAX_PROMPT_LENGTH

configMAX_WIDTH

configNETWORK

configNO_COLOR

configPORT

configPRICE_USDC

configPROMPT

configPUBLIC_URL

configPYTHON_BIN

configREGISTRY_URL

configRPC_URL

🔐 secretSELLER_PRIVATE_KEY

configSTDIN

🔐 secretSWARMWAGE_BUDGET_TOKEN

configSWARMWAGE_FACILITATOR

configSWARMWAGE_NETWORK

configSWARMWAGE_NO_UPDATE_CHECK

🔐 secretSWARMWAGE_PRIVATE_KEY

configSWARMWAGE_REGISTRY_NO_LISTEN

configSWARMWAGE_REGISTRY_URL

configTIMEOUT_MS

configWIDTH

configX_LABEL

configY_LABEL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/swarmwage-swarmwage-jgz1tc)](https://m8ven.ai/mcp/swarmwage-swarmwage-jgz1tc)

commit: 7861be662ed13c9c602a539070cc6f67c26dc5fd

code hash: 22f78dec14faaabb334345a75ad00a12159cff49de3f78d642ae5da83d982def

verified: 6/11/2026, 11:14:27 AM

view raw JSON →