Back to MCP Trust Indexm8ven
54
/ 100
1 month ago
glama

OmniWire

A unified mesh control layer that provides 30 MCP tools for managing distributed infrastructure, enabling AI agents to execute commands, transfer files, and manage Docker containers across multiple nodes. It features persistent SSH2 connection pooling and cross-node configuration synchronization to unify disparate servers into a single interface.

→ VoidChecksum/omniwire· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
12 tools describe read intent but their handlers mutate — omniwire_tail_log (line 929: manager.exec(node, `tail -n ${n} "${path}"`)); omniwire_network (line 1560: manager.exec(node, cmd)); omniwire_backup (line 2691: manager.exec(nodeId, `mkdir -p ${bd}; ts=\$(date +%s); host=\$(hostname); out="${bd}/\${host}-\${ts}…)
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: OW_PG_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highpicomatch@4.0.3GHSA-c2c7-rcm5-vvqj

Picomatch has a ReDoS vulnerability via extglob quantifiers

highws@8.18.0GHSA-96hv-2xvq-fx4p

ws: Memory exhaustion DoS from tiny fragments and data chunks

lowpicomatch@4.0.3GHSA-3v7f-55p6-f55p

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

lowws@8.18.0GHSA-58qx-3vcg-4xpx

ws: Uninitialized memory disclosure

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCYBERSYNC_DB_URL— PostgreSQL (optional) Required only for CyberSync / CyberBase persistence — Node A hosts it (configure accordingly)
configHOSTNAME
configOMNIWIRE_CANVAS_NAME
configOMNIWIRE_VAULT_ROOT— Optional Path to Obsidian vault root (default: CyberBase vault)
configOW_CONTABO_PUB
configOW_CONTABO_TS
configOW_HOSTINGER_PUB
configOW_HOSTINGER_TS
🔐 secretOW_PG_PASSWORD
configOW_THINKPAD_TS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/voidchecksum-omniwire-467mxr)](https://m8ven.ai/mcp/voidchecksum-omniwire-467mxr)
commit: ba99f34dd02176b8e5ae0a0c2a03341ff148fddf
code hash: bf1031d067ec080bbc5be488dba1d7d6c1bda90a428716a1f64adc486ef6036a
verified: 6/16/2026, 12:01:59 PM
view raw JSON →