Back to MCP Trust Indexm8ven
67
/ 100
27 days ago
glama

mqtt-mcp

MCP server that bridges MQTT sensor data to MCP, allowing clients to query cached sensor readings and send commands via tools like list_topics, read_topic, and publish.

→ URL42/mqtt-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: MQTT_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMQTT_HOST— broker-ip> MQTT_USERNAME=mqtt MQTT_PASSWORD=<password> uv run server.py
configMQTT_PORT— 1883 Broker port
configMQTT_USERNAME— MQTT_HOST=<broker-ip> =mqtt MQTT_PASSWORD=<password> uv run server.py
🔐 secretMQTT_PASSWORD— MQTT_HOST=<broker-ip> MQTT_USERNAME=mqtt =<password> uv run server.py
configCMD_PREFIX— cmd/ Only prefix the publish tool may write to
configMCP_HOST— 0.0.0.0 MCP listen address
configMCP_PORT— 8000 MCP listen port
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/url42-mqtt-mcp-1gcy5z)](https://m8ven.ai/mcp/url42-mqtt-mcp-1gcy5z)
commit: 856628aef7f90e40ecdd4397a6ec80b35f81fefa
code hash: 9fd53b5cbf7494aac74351fd9ce970b067c28a13ede6f64d4567bd52f22ec0f2
verified: 7/4/2026, 9:14:34 AM
view raw JSON →