70
grade C
4 days ago
glama
AgentStamp
Trust intelligence MCP server for AI agents. 19 tools for identity stamps, reputation scoring (0-100), agent registry, forensic audit trails, ERC-8004 bridge, and A2A passports via x402 USDC micropayments.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: ANALYTICS_KEY. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
🔐
You'll be asked for 6 credentials: ADMIN_KEY, ADMIN_PASSWORD, ANALYTICS_KEY, AUTH_SECRET, BLIND_TOKEN_SECRET, ERC8004_PRIVATE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
ADMIN_KEY🔐 secret
ADMIN_PASSWORDconfig
AGENTSTAMP_API_URL🔐 secret
ANALYTICS_KEYconfig
API_URL🔐 secret
AUTH_SECRET🔐 secret
BLIND_TOKEN_SECRETconfig
CORS_ORIGINconfig
DB_PATH— No ./data/agentstamp.db SQLite database pathconfig
E2E_BASE_URL🔐 secret
ERC8004_PRIVATE_KEYconfig
ERC8004_RPC_URLconfig
FACILITATOR_URL— No https://facilitator.payai.network x402 facilitatorconfig
HOSTconfig
IP_HASH_SALTconfig
NETWORKconfig
NEXT_PUBLIC_API_URLconfig
PORT— No 4005 Backend server portconfig
RATE_LIMIT_ANALYTICS_MAXconfig
RATE_LIMIT_FREE_TIER_MAXconfig
RATE_LIMIT_FREE_TIER_WINDOW_MSconfig
RATE_LIMIT_MAX_REQUESTSconfig
RATE_LIMIT_MUTATION_MAXconfig
RATE_LIMIT_READ_MAXconfig
RATE_LIMIT_WINDOW_MSconfig
SANCTIONS_CHECK_ENABLEDconfig
SENTRY_DSNconfig
SENTRY_DSN_ASconfig
SENTRY_RELEASEconfig
SENTRY_TRACES_RATEconfig
SIGNING_KEY_PATHconfig
SOLANA_WALLET_ADDRESS— No — Solana wallet for USDC paymentsconfig
WALLET_ADDRESS— Yes — EVM wallet for USDC payments on Base// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/vinaybhosle-agentstamp-1hs4v9)commit: 3010e90ba164f910bc2aff495078d82696cc9ce7
code hash: bf2fb1374c8172492acf7f48dd316bb22e707a89331c63f984e323efedcacff8
verified: 4/18/2026, 3:48:37 PM