Back to MCP Trust Indexm8ven
45
/ 100
1 month ago
glama

fvtt-mcp-molten5e

Enables AI assistants to read and edit live D&D 5e Foundry VTT worlds and manage Molten-hosted server lifecycle via the Model Context Protocol.

→ Txpple/fvtt-mcp-molten5e· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: MOLTEN_ADMIN_KEY, MOLTEN_WEBDAV_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configENABLE_FILE_LOGGING
configFOUNDRY_CONNECTION_TIMEOUT
configFOUNDRY_CONNECTION_TYPE
configFOUNDRY_DATA_PATH
configFOUNDRY_HOST
configFOUNDRY_NAMESPACE
configFOUNDRY_PORT
configFOUNDRY_PROTOCOL
configFOUNDRY_RECONNECT_ATTEMPTS
configFOUNDRY_RECONNECT_DELAY
configFOUNDRY_REJECT_UNAUTHORIZED
configFOUNDRY_REMOTE_MODE
configFOUNDRY_STUN_SERVERS
configLOG_FILE_PATH
configLOG_FORMAT
configLOG_LEVEL
🔐 secretMOLTEN_ADMIN_KEY— . Read them from your Molten panel → Server Details. Each tool reports which
configMOLTEN_FILEBROWSER_URL— . The committed defaults are neutral your-server/your-world
configMOLTEN_SERVER_URL— Non-secret, per-instance: , MOLTEN_WORLD_ID, MOLTEN_WEBDAV_URL,
🔐 secretMOLTEN_WEBDAV_PASSWORD— Secrets (never commit — env only): (upload-asset / asset file ops),
configMOLTEN_WEBDAV_URL— Non-secret, per-instance: MOLTEN_SERVER_URL, MOLTEN_WORLD_ID, ,
configMOLTEN_WEBDAV_USER
configMOLTEN_WORLD_ID— Non-secret, per-instance: MOLTEN_SERVER_URL, , MOLTEN_WEBDAV_URL,
configSERVER_NAME
configSERVER_VERSION
configTOOL_RESPONSE_MAX_CHARS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/txpple-fvtt-mcp-molten5e-ydwtfj)](https://m8ven.ai/mcp/txpple-fvtt-mcp-molten5e-ydwtfj)
commit: 14bfd26fed573016218edec5750e11a7e340749a
code hash: 65afa80b9bd2c8a83266b456912827b728d8b09800606a3dfb35cb1ea92e98b6
verified: 6/22/2026, 1:12:55 PM
view raw JSON →