74
/ 100
22 hours ago
glama
trovex
Indexes your repo's markdown into a canonical doc store, serving agents the single current doc per question via MCP to save tokens and keep all agents on the same source of truth.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
3 flows detected: TWENTY_API_KEY, SUPABASE_SERVICE_ROLE_KEY, WAITLIST_GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 9 credentials: KV_REST_API_TOKEN, RESEND_API_KEY, SUPABASE_SERVICE_ROLE_KEY, TWENTY_API_KEY, TWENTY_WEBHOOK_SECRET, WAITLIST_GITHUB_TOKEN, WAITLIST_KV_REST_API_TOKEN, OPENAI_API_KEY, TROVEX_OPENAI_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
GUARD_ROOTS🔐 secret
KV_REST_API_TOKENconfig
KV_REST_API_URLconfig
NOTIFY_EMAIL_FROMconfig
NOTIFY_EMAIL_TOconfig
NOTIFY_WEBHOOK_URL🔐 secret
RESEND_API_KEY🔐 secret
SUPABASE_SERVICE_ROLE_KEYconfig
SUPABASE_URL🔐 secret
TWENTY_API_KEYconfig
TWENTY_BASE_URL🔐 secret
TWENTY_WEBHOOK_SECRETconfig
WAITLIST_GITHUB_REPO🔐 secret
WAITLIST_GITHUB_TOKENconfig
WAITLIST_IP_SALT🔐 secret
WAITLIST_KV_REST_API_TOKENconfig
WAITLIST_KV_REST_API_URLconfig
TROVEX_DATA_DIRconfig
TROVEX_EMBED_MODEL— Another local model: =<fastembed model> plusconfig
TROVEX_DISTIL_MODEL🔐 secret
OPENAI_API_KEY— trovex bench /path/to/your/repo --eval # full answer+judge A/B at equal task-success (needs )🔐 secret
TROVEX_OPENAI_KEYconfig
TROVEX_MCP_ALLOWED_HOSTSconfig
TROVEX_MCP_ALLOWED_ORIGINSconfig
TROVEX_RERANK_MODELconfig
CLAUDE_CONFIG_DIR// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/tsukumohq-trovex-1xu503)commit: 50d40e5f33dac7c35e6b28ab42f147bf9446f8cc
code hash: d2df567426ebf3edaa788652b375ce6cd48f5adc7083f3beb4144ee4bd2021b7
verified: 7/30/2026, 8:10:41 PM