grade F

14 days ago

glama

Vexa

Open-source meeting bot API with MCP server. Search, retrieve, and analyze meeting transcripts from Google Meet, Zoom, and Microsoft Teams directly from your AI tools.

→ Vexa-ai/vexa · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: VEXA_ADMIN_API_KEY, VEXA_API_URL. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 13 credentials: AGENT_API_TOKEN, AI_API_KEY, AZURE_AD_CLIENT_SECRET, GOOGLE_CLIENT_SECRET, GOOGLE_OAUTH_STATE_SECRET, JWT_SECRET, NEXTAUTH_SECRET, SMTP_PASS, VEXA_ADMIN_API_KEY, VEXA_API_KEY, ZOOM_CLIENT_SECRET, ZOOM_OAUTH_CLIENT_SECRET, ZOOM_OAUTH_STATE_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAGENT_API_TOKEN

configAGENT_API_URL

🔐 secretAI_API_KEY

configAI_API_VERSION

configAI_BASE_URL

configAI_MODEL

configAPI_GATEWAY_HOST_PORT

configAZURE_AD_CLIENT_ID

🔐 secretAZURE_AD_CLIENT_SECRET

configAZURE_AD_TENANT_ID

configDASHBOARD_URL

configDEFAULT_BOT_NAME

configENABLE_AZURE_AD_AUTH

configENABLE_GOOGLE_AUTH

configGOOGLE_CALENDAR_REDIRECT_URI

configGOOGLE_CLIENT_ID

🔐 secretGOOGLE_CLIENT_SECRET

🔐 secretGOOGLE_OAUTH_STATE_SECRET

🔐 secretJWT_SECRET

🔐 secretNEXTAUTH_SECRET

configNEXTAUTH_URL

configNEXT_PUBLIC_AGENT_API_URL

configNEXT_PUBLIC_APP_URL

configNEXT_PUBLIC_APP_VERSION

configNEXT_PUBLIC_BASE_PATH

configNEXT_PUBLIC_BASE_URL

configNEXT_PUBLIC_BLOG_URL

configNEXT_PUBLIC_DECISION_LISTENER_URL

configNEXT_PUBLIC_EXTERNAL_AUTH_URL

configNEXT_PUBLIC_HOSTED_MODE

configNEXT_PUBLIC_TRACKER_ENABLED

configNEXT_PUBLIC_TRANSCRIPT_SHARE_BASE_URL

configNEXT_PUBLIC_VEXA_API_URL

configNEXT_PUBLIC_VEXA_PUBLIC_API_URL

configNEXT_PUBLIC_WEBAPP_URL

configNOTIFICATIONS_URL

configSMTP_HOST

🔐 secretSMTP_PASS

configSMTP_USER

🔐 secretVEXA_ADMIN_API_KEY

configVEXA_ADMIN_API_URL

🔐 secretVEXA_API_KEY

configVEXA_API_URL

configVEXA_PUBLIC_API_URL

configZOOM_CLIENT_ID

🔐 secretZOOM_CLIENT_SECRET

configZOOM_OAUTH_CLIENT_ID

🔐 secretZOOM_OAUTH_CLIENT_SECRET

configZOOM_OAUTH_REDIRECT_URI

🔐 secretZOOM_OAUTH_STATE_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/vexa-ai-vexa-1ao4gl)](https://m8ven.ai/mcp/vexa-ai-vexa-1ao4gl)

commit: dc5b7f30899433e2b14c249d5c089d3baf93eede

code hash: f2adc463cbb9c09bb12a3e68cfcf8146dad440e4fa90b7add80932eec2a0aaf9

verified: 4/11/2026, 2:55:02 PM

view raw JSON →