Back to MCP Trust Indexm8ven
43
/ 100
1 month ago
glama

Nixtla MCP Server

Enables multitenant time series forecasting and anomaly detection using Nixtla's TimeGPT, with support for fine-tuning, rolling backtests, and usage tracking.

→ VaclavRut/nixtla-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 5 credentials: ADMIN_SETUP_TOKEN, BLOB_READ_WRITE_TOKEN, CRON_SECRET, MCP_AUTH_TOKEN_SECRET, NIXTLA_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@4.0.16GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretADMIN_SETUP_TOKEN— your_admin_token_here
configBASE_URL
🔐 secretBLOB_READ_WRITE_TOKEN— your_vercel_blob_token_here
🔐 secretCRON_SECRET
🔐 secretMCP_AUTH_TOKEN_SECRET— your_strong_random_secret_here
configMONGODB_URI— mongodb+srv://username:password@cluster.mongodb.net/?retryWrites=true&w=majority
🔐 secretNIXTLA_API_KEY— your_nixtla_api_key_here
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/vaclavrut-nixtla-mcp-16sq5r)](https://m8ven.ai/mcp/vaclavrut-nixtla-mcp-16sq5r)
commit: ec72efc4d2b242a1890daa3bf7a62255651bb5be
code hash: 029a768e61d9de273b9ef12c0fa1cee3e349b63cca811c87fef7f5797d8ce719
verified: 6/23/2026, 10:23:17 AM
view raw JSON →