B
Emerging
89/100
8 days ago
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Code Verified⚡ Live Monitored
Monitored 8 days · every push re-verified
Who stands behind it
gmail.com (@velesnitski) · Verified Publisher
Source: Glama · also listed on github_code
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
84 tools verified — handlers match their declared behaviour
55 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: YOUTRACK_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
Are you the publisher? Confirm or correct these findings.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
config
YOUTRACK_OAUTH_URLPublic HTTPS URL of this server — enables OAuth for claude.ai connectorsconfig
YOUTRACK_ACCESS_CODEAccess code for OAuth gate — users must enter this code to connect (requires YOUTRACK_OAUTH_URL)config
YOUTRACK_ATTACHMENT_ROOTSconfig
YT_MCP_CONFIG_DIRconfig
YT_MCP_FETCH_CONCURRENCYconfig
YOUTRACK_ALLOW_HTTPSet to 1 to allow non-HTTPS URLs (not recommended)config
YOUTRACK_READ_ONLYGlobal settings — , DISABLED_TOOLS, and YOUTRACK_MAX_BULK_RESULTS apply to all instances.config
DISABLED_TOOLSGlobal settings — YOUTRACK_READ_ONLY, , and YOUTRACK_MAX_BULK_RESULTS apply to all instances.config
YOUTRACK_MAX_BULK_RESULTSGlobal settings — YOUTRACK_READ_ONLY, DISABLED_TOOLS, and apply to all instances.config
YOUTRACK_TOOLSETconfig
YOUTRACK_URLNo YOUTRACK_INSTANCES — single-instance mode, fully backward compatible. Uses / YOUTRACK_TOKEN as before.🔐 secret
YOUTRACK_TOKENNo YOUTRACK_INSTANCES — single-instance mode, fully backward compatible. Uses YOUTRACK_URL / as before.config
YOUTRACK_INSTANCESNo — single-instance mode, fully backward compatible. Uses YOUTRACK_URL / YOUTRACK_TOKEN as before.config
YOUTRACK_COMPACTSet to 1 to strip markdown from tool responses (~60% token savings)config
YOUTRACK_LOG_FILEError log path (default: ~/.yt-mcp/yt-mcp.log)config
YOUTRACK_ANALYTICS_FILEAnalytics log path (default: ~/.yt-mcp/analytics.log)config
YT_MCP_TRANSPORTDeployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deploy
SENTRY_DSNdeploy
SENTRY_ENVIRONMENT// embed badge in your README
[](https://m8ven.ai/mcp/velesnitski/yt-mcp)Shows your grade and updates automatically. Prefer no grade? Append
?variant=verified to the badge URL.commit: 9bc4155e3ac1cde5cc8ef54d755180a8315f8048
code hash: fe68981c0d0ea493f710d0feb1fc4992ed43909ae2c902012f28dd970106522c
verified: 9/2/2026, 11:31:17 AM
Check MCPs from inside your assistant
Tool Check · MCPVetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-checkcheck_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client