Unleash/unleash-mcp

MCP server for managing Unleash feature flags

→ Unleash/unleash-mcp· npm: @unleash/mcp· listed on npm

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npm Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPP_LOG_FILE— env ="$(pwd)/app.log" \

configLOG_LEVEL— env =debug \

configMCP_STDIO_LOG_FILE— env ="$(pwd)/mcp-stdio.log" \

configUNLEASH_BASE_URL— env ={{your-instance-url}} \

configUNLEASH_DEFAULT_ENVIRONMENT

configUNLEASH_DEFAULT_PROJECT— {{default_project_id}} \

configUNLEASH_MCP_CLIENT_ATTRIBUTION— Set =off to disable enrichment and revert to unleash-mcp/<version> (MCP Server). Default: enabled.

configUNLEASH_PAT— env ={{your-personal-access-token}} \

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/unleash-mcp-1in5ey)](https://m8ven.ai/mcp/unleash-mcp-1in5ey)

commit: 072e341131621c7ce3dd53f8d644a985d158140f

code hash: 2d20f40c9dcbc62471c11d3d3cbc3a5c70b302aad3a2205ce044ea9f5caf1de7

verified: 6/10/2026, 10:20:01 AM

view raw JSON →