40
/ 100
11 hours ago
glama

keryx

Enables AI agents to pay creators for each citation via the x402 micropayment protocol, with automatic research, grounded answers, and on-chain settlement.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 14 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
2 tools verified — handlers match their declared behaviour
1 read-only tool verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 17 credentials: AGENT_FUNDER_PRIVATE_KEY, ANTHROPIC_API_KEY, BUYER_PRIVATE_KEY, CONTENT_MASTER_KEY, DEEPSEEK_API_KEY, DEPLOYER_PRIVATE_KEY, DISCORD_PUBLIC_KEY, JWT_SECRET, KERYX_BOT_KEY, KERYX_EMBEDDING_API_KEY, MIMO_API_KEY, NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY, OPENAI_API_KEY, SLACK_SIGNING_SECRET, SUPABASE_SERVICE_ROLE_KEY, TELEGRAM_BOT_TOKEN, TELEGRAM_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies14 high9 medium8 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highnext@16.1.6GHSA-267c-6grr-h53f

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes

highnext@16.1.6GHSA-26hh-7cqf-hhc6

Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

highnext@16.1.6GHSA-36qx-fr4f-26g5

Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n

highnext@16.1.6GHSA-492v-c6pp-mqqv

Next.js has a Middleware / Proxy bypass through dynamic route parameter injection

highnext@16.1.6GHSA-6gpp-xcg3-4w24

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAGENT_FUNDER_PRIVATE_KEYWith ANTHROPIC_API_KEY + + NEXT_PUBLIC_KERYX_REGISTRY_ADDRESS it
🔐 secretANTHROPIC_API_KEYWith + AGENT_FUNDER_PRIVATE_KEY + NEXT_PUBLIC_KERYX_REGISTRY_ADDRESS it
configBASE_URL
🔐 secretBUYER_PRIVATE_KEY
🔐 secretCONTENT_MASTER_KEY
🔐 secretDEEPSEEK_API_KEY
🔐 secretDEPLOYER_PRIVATE_KEY
🔐 secretDISCORD_PUBLIC_KEY
🔐 secretJWT_SECRET
configKERYX_A2A_FEE
configKERYX_A2A_MAX_BUDGET
configKERYX_ANON_MAX_BUDGET
🔐 secretKERYX_BOT_KEY
configKERYX_CITATION_POOL_RATIO
configKERYX_DEFAULT_BUDGET
configKERYX_DEFAULT_FETCH_PRICE
configKERYX_DEV_WALLETS
🔐 secretKERYX_EMBEDDING_API_KEY
configKERYX_EMBEDDING_BASE_URL
configKERYX_EMBEDDING_MODEL
configKERYX_ENGINE_ALT_MODEL_RATIO
configKERYX_ENGINE_GAP_RETRY_RATIO
configKERYX_EXTERNAL_DISCOVERY
configKERYX_EXTERNAL_DISCOVERY_LIMIT
configKERYX_GATEWAY_DEPOSIT
configKERYX_GATEWAY_MINTER
configKERYX_GATEWAY_MIN_AVAILABLE
configKERYX_GATEWAY_WALLET
configKERYX_IPFS_GATEWAY
configKERYX_LLM_BASE_URL
configKERYX_LLM_CIRCUIT_COOLDOWN_MS
configKERYX_LLM_CIRCUIT_FAILURES
configKERYX_LLM_MODEL
configKERYX_LLM_TIMEOUT_MS
configKERYX_MAX_CITATION_USDC
configKERYX_MAX_TIMEOUT_SECONDS
configKERYX_MCP_ALLOWED_ORIGINS
configKERYX_MIMO_BASE_URL
configKERYX_NETWORK
configKERYX_REEVALUATE_ROUNDS
configKERYX_REGISTRY_ADDRESS
configKERYX_REGISTRY_DEPLOY_BLOCK
configKERYX_REGISTRY_READ_ADDRESS
configKERYX_RPC_URL
configKERYX_RPC_WS_URL
configKERYX_SESSION_GRANT_TTL
configKERYX_SYNTHESIS_MODEL
configKERYX_USDC_ADDRESS
configKERYX_WITHDRAW_FEE_RESERVE
configKERYX_WITHDRAW_MAX_FEE
🔐 secretMIMO_API_KEY
configNEXT_DIST_DIR
configNEXT_PUBLIC_KERYX_REGISTRY_ADDRESSWith ANTHROPIC_API_KEY + AGENT_FUNDER_PRIVATE_KEY + it
configNEXT_PUBLIC_KERYX_REGISTRY_READ_ADDRESS
configNEXT_PUBLIC_KERYX_SETTLEMENT_WALLET
🔐 secretNEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY
configNEXT_PUBLIC_SUPABASE_URL
configNEXT_PUBLIC_WC_PROJECT_ID
🔐 secretOPENAI_API_KEY
configPINATA_JWT
configSELLER_ADDRESS
🔐 secretSLACK_SIGNING_SECRET
🔐 secretSUPABASE_SERVICE_ROLE_KEY
🔐 secretTELEGRAM_BOT_TOKEN
🔐 secretTELEGRAM_WEBHOOK_SECRET
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/tang-vu-keryx-1jx6z4)](https://m8ven.ai/mcp/tang-vu-keryx-1jx6z4)
commit: b0b0e681848a48aedf1e72a47c1a8296bf641388
code hash: 086f383340bfafb744d03a5f78465e7b8df6c1c264d9037654ac7f5553d1beae
verified: 7/31/2026, 8:58:24 AM
view raw JSON →