nanomcp

A minimal MCP server demo written without the MCP Python SDK that demonstrates the complete protocol flow. It provides weather, file search, and datetime tools, and includes a CLI client that bridges MCP tools with OpenAI function calling.

→ szfmsmdx/nanomcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 1 credential: OPENAI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretOPENAI_API_KEY— 如果 chat 输出 OpenAI API quota is exhausted (429 insufficient_quota)，意思是模型 API 拒绝了请求：当前所属项目没有可用额度或 billing 没开通。这不是 MCP server 失败，因为请求在模型返回 tool call 之前就被拒绝了。

configOPENAI_BASE_URL

configNANOMCP_MODEL— gpt-4.1-mini

configNANOMCP_TIMEZONE— Asia/Shanghai

configNANOMCP_FILE_ROOT— ~/Desktop/nanomcp python3 -m nanomcp.cli call find_files '{"query":".py"}'

configNANOMCP_LIVE_WEATHER— 1 python3 -m nanomcp.cli call get_weather '{"location":"Shanghai"}'

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/szfmsmdx-nanomcp-1bv1e1)](https://m8ven.ai/mcp/szfmsmdx-nanomcp-1bv1e1)

commit: a5c68b89c4a07526cef8da8a0cb7ae6d2162ebc2

code hash: 45e9de02a20e6b78b8dfdac15e128dd55b6bdcda0e07fbfcbef44341f46503d9

verified: 6/17/2026, 11:52:38 AM

view raw JSON →