/ 100

10 hours ago

glama

rote

Item: rote
Rating: 71
Author: M8ven

MCP server that exposes compiled rote pipelines as callable tools. The rote CLI compiles a proven agent skill into a deterministic workflow, and rote serve lets any MCP client trigger the deployed pipelines and poll their status.

→ trevhud/rote · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 6 credentials: INNGEST_EVENT_KEY, CLOUDFLARE_API_TOKEN, ROTE_CLOUD_TOKEN, ANTHROPIC_API_KEY, OPENAI_API_KEY, ANTHROPIC_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configROTE_MCP_CONFIG

configXDG_CONFIG_HOME

configROTE_MCP_TOKEN_DIR

configXDG_DATA_HOME

configROTE_INNGEST_EVENT_URL

🔐 secretINNGEST_EVENT_KEY

🔐 secretCLOUDFLARE_API_TOKEN

configCLOUDFLARE_ACCOUNT_ID

configDBOS_SYSTEM_DATABASE_URL

configPGHOST

configPGPORT

configPGUSER

configPGPASSWORD

configROTE_APPS_PATH

configROTE_INFERENCE

configROTE_CLOUD_CRED_PATH

configROTE_CONFIG_PATH

configROTE_PROJECT_CONFIG_PATH

configROTE_CLOUD_URL— $/$ROTE_CLOUD_TOKEN still override).

🔐 secretROTE_CLOUD_TOKEN— $ROTE_CLOUD_URL/$ still override).

🔐 secretANTHROPIC_API_KEY— (claude) or Codex (codex) installed and authed, or

🔐 secretOPENAI_API_KEY

🔐 secretANTHROPIC_AUTH_TOKEN

configROTE_USAGE_LOG

configROTE_INFERENCE_TIMEOUT

configROTE_AGENT_TIMEOUT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/trevhud-rote-1y6f5a)](https://m8ven.ai/mcp/trevhud-rote-1y6f5a)

commit: 57f331db90f6d4183bc9ac8a70ff2aa5dfb5409a

code hash: 8fa7bee412398a7860f066e80be703b98a387814683f6704a56ef8a188e4ca7e

verified: 7/31/2026, 9:15:35 AM

view raw JSON →