72
grade C
11 days ago
glama
Craft MCP Server
A lightweight MCP server providing read access to craft.io workspaces and items like products and features. It enables users to query workspace details and retrieve specific items through the Model Context Protocol.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: CRAFT_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
CRAFT_ACCOUNT_ID— export ="your-account-id"🔐 secret
CRAFT_API_KEY— export ="your-api-key"config
CRAFT_PORTAL_ID— export ="your-portal-id" # optionalconfig
CRAFT_WORKSPACE_ID— export ="your-workspace-id"// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/upstackjade-craft-mcp-1em27i)commit: df2f4bcb0c931f6d9b4c9e52b2f386d21a3d1210
code hash: f39f4a215a724358661727f1311c3a51c704828194f96cef29b42ab2eaf01431
verified: 4/11/2026, 3:10:43 PM