/ 100

1 month ago

glama

Vexa

Item: Vexa
Rating: 53
Author: M8ven

Open-source meeting bot API with MCP server. Search, retrieve, and analyze meeting transcripts from Google Meet, Zoom, and Microsoft Teams directly from your AI tools.

→ Vexa-ai/vexa · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

8 flows detected: VEXA_API_URL, VEXA_ADMIN_API_URL. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 14 credentials: AGENT_API_TOKEN, AI_API_KEY, AZURE_AD_CLIENT_SECRET, GOOGLE_CLIENT_SECRET, GOOGLE_OAUTH_STATE_SECRET, JWT_SECRET, NEXTAUTH_SECRET, SMTP_PASS, VEXA_ADMIN_API_KEY, VEXA_API_KEY, VEXA_DASHBOARD_TEST_TOKEN, ZOOM_CLIENT_SECRET, ZOOM_OAUTH_CLIENT_SECRET, ZOOM_OAUTH_STATE_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAGENT_API_TOKEN

configAGENT_API_URL

🔐 secretAI_API_KEY

configAI_API_VERSION

configAI_BASE_URL

configAI_MODEL

configAPI_GATEWAY_HOST_PORT

configAZURE_AD_CLIENT_ID

🔐 secretAZURE_AD_CLIENT_SECRET

configAZURE_AD_TENANT_ID

configDASHBOARD_URL

configDEFAULT_BOT_NAME

configENABLE_AZURE_AD_AUTH

configENABLE_GOOGLE_AUTH

configEXPECTED_VEXA_OSS_VERSION

configGOOGLE_CALENDAR_REDIRECT_URI

configGOOGLE_CLIENT_ID

🔐 secretGOOGLE_CLIENT_SECRET

🔐 secretGOOGLE_OAUTH_STATE_SECRET

🔐 secretJWT_SECRET

configMINIO_INTERNAL_ENDPOINT

🔐 secretNEXTAUTH_SECRET

configNEXTAUTH_URL

configNEXT_PUBLIC_AGENT_API_URL

configNEXT_PUBLIC_API_URL

configNEXT_PUBLIC_APP_URL

configNEXT_PUBLIC_BASE_PATH

configNEXT_PUBLIC_BASE_URL

configNEXT_PUBLIC_BLOG_URL

configNEXT_PUBLIC_DECISION_LISTENER_URL

configNEXT_PUBLIC_DOCS_URL

configNEXT_PUBLIC_EXTERNAL_AUTH_URL

configNEXT_PUBLIC_HOSTED_MODE

configNEXT_PUBLIC_TRACKER_ENABLED

configNEXT_PUBLIC_TRANSCRIPT_SHARE_BASE_URL

configNEXT_PUBLIC_VEXA_API_URL

configNEXT_PUBLIC_VEXA_OSS_RELEASE_DATE

configNEXT_PUBLIC_VEXA_OSS_VERSION

configNEXT_PUBLIC_VEXA_PUBLIC_API_URL

configNEXT_PUBLIC_WEBAPP_URL

configNOTIFICATIONS_URL

configSMTP_HOST

🔐 secretSMTP_PASS

configSMTP_USER

🔐 secretVEXA_ADMIN_API_KEY

configVEXA_ADMIN_API_URL

configVEXA_ALLOW_DIRECT_LOGIN

🔐 secretVEXA_API_KEY

configVEXA_API_URL

🔐 secretVEXA_DASHBOARD_TEST_TOKEN

configVEXA_PUBLIC_API_URL

configVEXA_REPO_ROOT

configZOOM_CLIENT_ID

🔐 secretZOOM_CLIENT_SECRET

configZOOM_OAUTH_CLIENT_ID

🔐 secretZOOM_OAUTH_CLIENT_SECRET

configZOOM_OAUTH_REDIRECT_URI

🔐 secretZOOM_OAUTH_STATE_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/vexa-ai-vexa-1ao4gl)](https://m8ven.ai/mcp/vexa-ai-vexa-1ao4gl)

commit: c0614ca7f9af31440c36792059b1dbc9a2f645c6

code hash: 8993c6499cbfffce5fccc0da0ef5f8d1da0c6948375f8cc2f1a134d5d6cdaf40

verified: 6/13/2026, 10:30:28 AM

view raw JSON →