Cerebro MCP (Synvoya/cerebro-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 30 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Caution
74/100

Cerebro MCP

Enables non-coders to build software by describing ideas in natural language, orchestrating AI agents and CLI workers via chat without needing a terminal.

→ Synvoya/cerebro-mcp· listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Synvoya

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — quick_task (line 347: mkdirSync(resolvedPath, { recursive: true }))
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 1 credential: CEREBRO_SECRET_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes30 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

create_session

Create a new Cerebro session and project workspace

resume_session

Resume an existing session using a handover token

pause_session

Pause an active session for later resumption

end_session

Complete and archive a session

list_sessions

List all active, paused, and recent sessions

execute_task

Send a task to the appropriate worker or agent for execution

quick_task

The easiest way to use Cerebro — just describe what you want built or fixed. Auto-creates a session, picks the right CLI provider, and executes. Use this when the user says things like 'build me a website' or 'fix this bug' or 'review this code' without specifying sessions or agents. If no projectPa…

read_project

Read the project folder structure and file contents. Use this to understand a codebase before making changes. Returns directory tree and optionally file contents for specified files or all files.

get_status

Get current project progress and task status

review_code

Get a human-friendly explanation of code changes

run_build

Trigger a project build and return results

run_tests

Run the test suite and return results

create_agent

Define a new specialist agent via natural language description

list_agents

Show all agents in the current session with their status

update_agent

Modify an existing agent's definition, skills, or preferences

remove_agent

Delete an agent from the swarm

get_agent_status

Get detailed status and history for a specific agent

install_agent_pack

Install pre-built agent templates from the marketplace

delegate_to_agent

Explicitly route a task to a specific agent, overriding auto-routing

analyze_image

Interpret an image and suggest actions. How it works: the user uploads an image to Chat, Chat (Claude) sees and describes it, then calls this tool with the description. No API key needed — Chat IS the vision layer.

implement_from_image

Build or fix code based on an image. Chat sees the image, describes it, and this tool sends the description to a CLI worker to implement. Works for: screenshots of bugs to fix, mockups to build, error messages to resolve.

compare_screenshots

Visual diff between expected and actual. Chat compares two images and describes the differences, then this tool structures the findings and can trigger fixes.

prepare_handover

Generate a signed handover token for session continuity across chats

validate_token

Check if a handover token is valid

get_context_health

Report current context window usage and handover readiness

configure_workers

Configure which CLI tools handle which tasks. Say 'Use Claude for coding and Codex for testing' or 'Set Aider as default'

detect_providers

Detect which CLI coding tools are installed and available on this system

configure_model

Set model, effort level, and terminal mode. Say 'Use Opus for coding' or 'Set high effort' or 'Run in background mode'

start_context_watcher

Open a persistent terminal showing real-time token usage. Tracks every Cerebro tool call with estimated tokens and handover recommendation.

stop_context_watcher

Stop the Context Watcher and close terminal. Tracking data preserved.

// known CVEs in dependencies1 critical1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

lowuuid@11.1.0GHSA-w5hq-g745-h8pq

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretCEREBRO_SECRET_KEY
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

30/30 tools missing one or more hints — create_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); resume_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); pause_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +27 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Descriptions match behaviour

1 tool describes read intent but its handler mutates — quick_task (line 347: mkdirSync(resolvedPath, { recursive: true }))

Rename the tool, rewrite the description, or move the side-effect into a separate clearly-named tool.

Tool test coverage

Only 0/30 tools referenced in tests (0%)

Write tests that reference each tool by name so every tool has at least one test.

Shell command execution

3 calls in production code run through a shell (src/context-watcher/terminal.ts:59, src/workers/terminal-spawner.ts:172, src/workers/terminal-spawner.ts:183)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Dev dependencies

1 critical/high in dev-only deps (does not ship to users)

Upgrade dev dependencies when convenient.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/synvoya/cerebro-mcp?variant=verified)](https://m8ven.ai/mcp/synvoya/cerebro-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 46d97e45f35b57934c387a734c45963bc6a95975
code hash: ef910b8b2eff94db2f1c73e6558bbd71e883981071304fd0274d1c4f8c1f724b
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client