Self-hosted AI assistant with hybrid memory, evolving personality, and multi-channel support (WhatsApp, Telegram, Discord, Slack)
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
UpayanGhosh
Source: github_code
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
BRIDGE_PORTComSpecMEDIA_CACHE_DIRMEDIA_CACHE_TTL_MINUTESPYTHON_STATE_WEBHOOK_URLPYTHON_WEBHOOK_URLSTART_BRIDGE_SOCKETSYNAPSE_AUTH_DIRSYNAPSE_GATEWAY_HOSTSYNAPSE_GATEWAY_PORTSYNAPSE_HOMESYNAPSE_PYTHON_VERSIONSYNAPSE_GATEWAY_TOKENSYNAPSE_EXEC_TOKENOLLAMA_BASESERVER_PORTSERVER_HOSTWHISPER_MODELGROQ_API_KEYWINDOWS_PC_IPADMIN_PHONEVIP_PHONESYNAPSE_GOOGLE_CALENDAR_CLIENT_SECRETSYNAPSE_TELEGRAM_TOKENSYNAPSE_DISCORD_TOKENSYNAPSE_DISCORD_CHANNEL_IDSSYNAPSE_SLACK_BOT_TOKENSYNAPSE_SLACK_APP_TOKENSYNAPSE_GATEWAY_BINDSYNAPSE_GATEWAY_AUTH_MODESYNAPSE_GOOGLE_OAUTH_CLIENT_PATHSYNAPSE_PRIMARY_PROVIDEROLLAMA_API_BASESYNAPSE_TELEGRAM_DM_POLICYSYNAPSE_DISCORD_DM_POLICYSYNAPSE_SLACK_DM_POLICYSYNAPSE_COMMUNICATION_STYLESYNAPSE_ENERGY_LEVELSYNAPSE_INTERESTSSYNAPSE_PRIVACY_LEVELSYNAPSE_PREFERRED_LANGUAGESYNAPSE_REGIONSYNAPSE_LOCALITYSYNAPSE_LOCAL_LANGUAGE_EXAMPLESAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYAWS_DEFAULT_REGIONGOOGLE_APPLICATION_CREDENTIALSVERTEXAI_PROJECTVERTEXAI_LOCATIONQIANFAN_SKGITHUB_COPILOT_TOKEN_DIRCORS_ORIGINSAPI_BIND_HOSTSYNAPSE_DEBUG_RESPONSE_METADATASESSION_TYPEGOOGLE_CLOUD_PROJECTGOOGLE_CLOUD_PROJECT_IDOPENROUTER_API_KEYWHATSAPP_BRIDGE_TOKENCODEX_HOMEGEMINI_API_KEYCopy .env.example to .env and fill in (only required key — see [.env.example.advanced](.env.example.advanced) for the full set).SYNAPSE_KG_MODELTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
52/52 tools missing one or more hints — call_tool (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); web_search (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); read_file (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +49 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool handlers catch errors
6/9 tool handlers wrap calls in try/catch (67%)
Wrap each tool handler body in try/catch and return a structured error response.
Tests exist
No test files found
Add tests that exercise each declared tool.
No access to sensitive paths
Reads sensitive paths: application_default_credentials.json
Remove reads of sensitive system paths. If you genuinely need them, document why in the README.
Shell command execution
2 child_process calls — runs shell commands
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/upayanghosh-synapse-oss-1lmmao)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check