/ 100

9 days ago

glama

mcp-x402

The first MCP server that pays for itself. AI agents pay for ScriptMasterLabs data autonomously via x402 — 43+ pay-per-call tools for market intelligence, SEC filings, federal grants/contracts, and more.

→ Timwal78/SML_Portfolio · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

4 flows detected: TRADIER_API_KEY, ROBINHOOD_ACCESS_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 20 credentials: ACP_SIGNER_PRIVATE_KEY, ALPACA_API_KEY, ALPACA_API_SECRET, ANTHROPIC_API_KEY, APM_QUOTE_SECRET, AUDIT_HMAC_SECRET, BASESCAN_API_KEY, CDP_API_KEY_SECRET, DEPLOYER_PRIVATE_KEY, LEVIATHAN_BYPASS_SECRET, PAYER_PRIVATE_KEY, POLYGON_API_KEY, RAPIDAPI_PROXY_SECRET, ROBINHOOD_ACCESS_TOKEN, SAM_API_KEY, SHADOW_ADMIN_API_KEY, SML_API_KEY, TRADIER_API_KEY, TRADIER_ACCESS_TOKEN, ALPACA_SECRET_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretACP_SIGNER_PRIVATE_KEY

configACP_WALLET_ADDRESS

configACP_WALLET_ID

configAGENTCARD_URL

configAGENT_CREDIT_BUREAU_URL

🔐 secretALPACA_API_KEY

🔐 secretALPACA_API_SECRET

🔐 secretANTHROPIC_API_KEY

configANTHROPIC_MODEL

configAPI_BASE

🔐 secretAPM_QUOTE_SECRET

🔐 secretAUDIT_HMAC_SECRET

configAUDIT_LOG_PATH

configBACKTEST_BASE_URL

🔐 secretBASESCAN_API_KEY

configBASE_RPC_URL

configBASE_SEPOLIA_RPC_URL

configCDP_API_KEY_ID

🔐 secretCDP_API_KEY_SECRET

configCORS_ORIGIN

configDAILY_SPEND_CAP_USD

🔐 secretDEPLOYER_PRIVATE_KEY

configDISCORD_WEBHOOK_URL

configENDPOINT

configFORGE_GATEWAY_URL

configGHOST_LAYER_URL

configLEVIATHAN_BASE_URL

🔐 secretLEVIATHAN_BYPASS_SECRET

configMCP_SSE_PORT

configMCP_TRANSPORT

configNEXT_PUBLIC_API_URL

🔐 secretPAYER_PRIVATE_KEY

configPAY_TO

🔐 secretPOLYGON_API_KEY

configPRICE

configPRICE_CACHE_TTL_MS

configPROOF402_SERVER_URL

configPROOF402_URL

configQUERY

🔐 secretRAPIDAPI_PROXY_SECRET

configRLUSD_ISSUER

🔐 secretROBINHOOD_ACCESS_TOKEN

configROBINHOOD_ACCOUNT_ID

🔐 secretSAM_API_KEY

🔐 secretSHADOW_ADMIN_API_KEY

configSHADOW_DESK_URL

configSML_API_BASE

🔐 secretSML_API_KEY

configSML_COPYTRADER_URL

configSML_LAUNCHPAD_URL

configSML_PAYMENT_RECEIVER

configSML_RAILS_URL

configSOLANA_RPC_URL

configSQUEEZEOS_API_BASE

configSQUEEZEOS_BASE_URL

configTESTNET

🔐 secretTRADIER_API_KEY

configTRADIER_ENV

configWALLET_SEED

configX402_FACILITATOR_AUTH

configX402_FACILITATOR_CHAIN

configXRPL_NETWORK

configXRPL_RECEIVING_ADDRESS

configXRPL_RPC_URL

configDEPT_MODEL

configMCP_X402_BASE_URL

configCONTENT_OUTPUT_DIR

configXRPL_SEED

configXRPL_WALLET

configBACKTEST_PORT

configALPACA_PAPER

🔐 secretTRADIER_ACCESS_TOKEN

configTRADIER_SANDBOX

🔐 secretALPACA_SECRET_KEY

configVAPL_REGISTRY_URL

configDRY_RUN

configVAPL_SOUL_B64

configAGENT_XRPL_SEED

configAGENT_XRPL_ADDRESS

configSTRATEGY

configVAPL_SOUL_FILE

configPORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/timwal78-sml-portfolio-1pq9ao)](https://m8ven.ai/mcp/timwal78-sml-portfolio-1pq9ao)

commit: 0f153ad55dceef59def1f64bb75ef45990372a3b

code hash: 1c97cccc06bb953412b3427deaaad4607de625780313a33ec8b2db23380d7484

verified: 7/6/2026, 10:38:22 AM

view raw JSON →