vocion-core (vocion/vocion-core) is an MCP server listed on the M8ven Trust Index. It scores 0 out of 100, grade F. It declares 38 tools. No publisher has claimed this listing.

F
Warning
0/100

vocion-core

Open source agent workforce platform. Next.js + Postgres + MCP server for AI agent teams with human-in-the-loop review, built in.

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

vocion

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: BRAVE_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Hardcoded credentials detected
4 live-looking API keys in source: 4 AWS access key
🚨
Known vulnerabilities in dependencies: 8 critical, 19 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 7 credentials: AUTH_SECRET, CLERK_SECRET_KEY, RESEND_API_KEY, RESEND_WEBHOOK_SECRET, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, VOCION_CREDENTIAL_VAULT_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes38 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

workspace_list

List every agent, skill, and object type defined in the active workspace directory. Returns slugs, names, and descriptions — not full prompts.

workspace_get

Return the full manifest (including prompt text) for one agent, skill, or object type. Use after workspace_list to pick the slug.

workspace_write_skill

Write a skill SKILL.md (frontmatter + body) to workspace/<org>/skills/. Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in. Returns files written, new context SHA, and the apply diff.

workspace_write_agent

Write an agent manifest + system prompt. Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in.

workspace_write_object_type

Write an object type manifest (schema, source relevance, classification prompt). Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in.

workspace_delete

Remove the files for an agent, skill, or object type from workspace/<org>/. Auto-commits + auto-applies (which will remove the row from the DB on the next apply).

workspace_apply

Reconcile workspace/<org>/ to the database and record a workspace_version audit row. Use after editing files directly (outside MCP) or when auto-apply was disabled.

workspace_diff

Dry-run apply — shows created/updated/unchanged counts without writing. Equivalent to `workspace_apply dryRun=true`.

workspace_version_history

Show the last N workspace_version rows: sha, summary, applied_by, applied_at. Useful for answering "when did this prompt last change?"

objects_list

Return business_object rows for this org. Filter by type slug (e.g. discovery_call, deal).

objects_get

Return a business_object row with its type and document links.

object_types_list

Return the business_object_type rows. Useful for discovering what type slugs are valid for objects_list.

search_query

Run a retrieval query against indexed documents (pgvector + Postgres FTS hybrid). Returns ranked documents with snippets, source type, dates, and links. Filter by sources (e.g. ["zoom","gmail"]) to narrow scope.

web_search

Live web search. Returns ranked titles, URLs, and snippets.

fetch_url

Fetch one URL and return its readable text/markdown.

crawl_site

Same-origin BFS crawl; returns pages (capped depth + count).

generate_image

Generate an image from a prompt; returns the saved artifact URL.

run_code

Evaluate a math expression (builtin) or run code (sandbox provider).

create_artifact

Create a CSV, SVG chart, or doc and return its URL.

mission_list

List authored mission templates (starting points) for this org.

mission_start

Start an open-ended team mission from a brief — from a template (missionSlug) or ad-hoc (team). Plans the work, then runs to completion or the first approval gate.

mission_list_runs

List mission runs (optionally filtered by status).

mission_get_run

Get one mission run with its plan (task graph), team, artifacts, and status.

mission_approve

Approve a paused mission run (awaiting_review) and continue execution.

mission_cancel

Cancel a mission run.

mission_promote

Draft a reusable Workflow from a completed mission run (for review before activating).

teams_list

Return the workspace lead plus every team of agents: lead agent, member roster, and exactly one resolved accountable human per team. Accountability provenance rides on `accountable.source` — "team" = set explicitly on the team, "workspace" = inherited from the workspace default. A null lead means "n

plugins_list

Return every skill registered via the plugin system (separate from prompt-only skills in the DB).

plugins_reload

Clear the registry and re-run plugin discovery. Use during local development after updating a plugin package. Hot-reload of edited local files is limited by Node ESM caching.

workflow_list

Return every workflow defined in workspace/<org>/workflows/ with its trigger and step count.

workflow_get

Return the complete manifest for a workflow including all step bodies.

workflow_run_start

Kick off a workflow manually. If the workflow hits an approve step, the run pauses and returns with status=paused.

workflow_run_list

Return recent workflow_run rows, newest first. Filter by workflow slug or status.

workflow_run_get

Full detail for one run including per-step results.

workflow_run_resume

After a human approves the current approve step, continue execution from where it left off.

workflow_run_cancel

Permanently cancel a running or paused run. Cannot be un-cancelled.

playbook_list

Return the catalog of skills and playbooks for this org (slug, name, description, kind, origin, version, license).

playbook_get

Return a playbook's SKILL.md body and optionally one named sibling resource (REFERENCE.html, etc.). Resources are listed on the catalog row.

// known CVEs in dependencies8 critical19 high13 medium11 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalnext@16.1.6GHSA-2xp9-vwfh-vxw4

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

criticalnext@16.1.6GHSA-p293-qw3h-jr36

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

criticalnext-auth@5.0.0-beta.31GHSA-7rqj-j65f-68wh

Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

criticalnext-auth@5.0.0-beta.31GHSA-8fpg-xm3f-6cx3

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

critical@vitest/browser@4.0.18GHSA-2h32-95rg-cppp

Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secretAUTH_SECRET
configBILLING_PLAN_ENV
configCHECKLY_EMAIL_ADDRESS
configCHECKLY_LOGICAL_ID
configCHECKLY_PROJECT_NAME
🔐 secretCLERK_SECRET_KEY
configENVIRONMENT_URL
configPLAYWRIGHT_BASE_URL
🔐 secretRESEND_API_KEY
🔐 secretRESEND_WEBHOOK_SECRET
configSEED_ORG_ID
🔐 secretSTRIPE_SECRET_KEY
🔐 secretSTRIPE_WEBHOOK_SECRET
configVOCION_ALLOW_QUEUE_RESET
configVOCION_AUTH_PROVIDER
🔐 secretVOCION_CREDENTIAL_VAULT_KEY
configVOCION_EMAIL_SURFACE
configVOCION_MAIL_DOMAIN
configVOCION_MAIL_ENABLED
configVOCION_MAIL_FROM
configVOCION_MCP_AGENT_SLUG
configVOCION_ORG_ID
configVOCION_ORG_NAME
configVOCION_THINKING_BUDGET
configWORKSPACE_AUTO_APPLY
configWORKSPACE_AUTO_COMMIT
configWORKSPACE_PATHdemo/workspace
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployDATABASE_URL
deployNEXT_PUBLIC_APP_URL
deployNEXT_PUBLIC_BETTER_STACK_INGESTING_HOST
deployNEXT_PUBLIC_BETTER_STACK_SOURCE_TOKEN
deployNEXT_PUBLIC_CLERK_PUBLISHABLE_KEY
deployNEXT_PUBLIC_LANGFUSE_BASE_URL
deployNEXT_PUBLIC_LANGFUSE_PROJECT_ID
deployNEXT_PUBLIC_LOGGING_LEVEL
deployNEXT_PUBLIC_SENTRY_DSN
deployNEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY
deployPORT
deploySENTRY_ORGANIZATION
deploySENTRY_PROJECT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

38/38 tools missing one or more hints — workspace_list (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); workspace_get (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); workspace_write_skill (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +35 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

No hardcoded API keys

4 live-looking API keys in source: 4 AWS access key

Move secrets to environment variables (process.env.X) or your secret manager.

Tool test coverage

17/38 tools referenced in tests (45%)

Write tests that reference each tool by name so every tool has at least one test.

No eval / new Function

1 eval() or new Function() call — dynamic code execution

Replace eval / Function with explicit parsing or safer alternatives.

Production dependencies are patched

4 critical, 16 high severity in production deps — next@16.1.6 (critical), next@16.1.6 (critical)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dev dependencies

7 critical/high in dev-only deps (does not ship to users)

Upgrade dev dependencies when convenient.

Dependency freshness

3/75 production deps abandoned (no release in 2+ years): gray-matter@2023-07-12 (3.2y), @dnd-kit/utilities@2023-11-06 (2.9y), rehype-slug@2023-11-20 (2.8y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/vocion/vocion-core?variant=verified)](https://m8ven.ai/mcp/vocion/vocion-core)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: cc18c0274310dd667c4fea2ec74553426c045150
code hash: e14c10be59ed71ffcf0ce93b8dd8a3d7eaac13024017dd383c782ed2eb06c71f
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client