mcp-common-server

Item: mcp-common-server
Rating: 41
Author: M8ven

Zero-dependency MCP server that provides AI models with secure read/write/exec access to local files and directories over HTTP and SSE, designed to be tunneled via ngrok for integration with Claude Web.

→ tamilts124/mcp-common-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 1 credential: MCP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configMCP_ALLOW_EXEC— Open the .env file and configure your local workspace paths in MCP_ROOTS (e.g. MCP_ROOTS=D:/proj1,D:/proj2) and toggle execution permissions (=true) as needed.

🔐 secretMCP_AUTH_TOKEN— unset Header requirement: Authorization: Bearer <token>. Unset = public

configMCP_CMD_TIMEOUT— 60 Maximum timeout in seconds allowed for any single synchronous subshell command

configMCP_IGNORE— node_modules,.git,__pycache__,.nyc_output,dist,build Comma-separated patterns excluded from listings and search operations

configMCP_READ_ONLY— false true hides and disables all modifying (write/create/delete) and shell execution tools

configMCP_ROOTS— Open the .env file and configure your local workspace paths in (e.g. MCP_ROOTS=D:/proj1,D:/proj2) and toggle execution permissions (MCP_ALLOW_EXEC=true) as needed.

configMCP_ROOT_DIR— D:/myproject node server-stdio.js

configPORT— 3000 HTTP port the server listens on

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/tamilts124-mcp-common-server-163kz1)](https://m8ven.ai/mcp/tamilts124-mcp-common-server-163kz1)

commit: 1565c071fd5d75af78aac70f4a7a8e748026d39c

code hash: b5f1540f8ad27c20c5977bf5037f9111cd9537245439f380a8f193d8779fe74d

verified: 6/29/2026, 11:23:18 AM

view raw JSON →