74
/ 100
20 days ago
glama
SecureLLM MCP Server
Enables AI assistants to interact with NixOS development tools, manage builds, and optimize workflows through natural language.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: GOTIFY_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 12 credentials: ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GITHUB_TOKEN, GOTIFY_TOKEN, GROQ_API_KEY, LLM_API_KEY, MISTRAL_API_KEY, NVIDIA_API_KEY, OPENAI_API_KEY, OPENROUTER_API_KEY, REPLICATE_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ADR_HYGIENE_INTERVALconfig
ADR_LEDGER_PATHconfig
ADR_REPO_PATHconfig
ALLOW_PLAINTEXT_TOKENS🔐 secret
ANTHROPIC_API_KEY— your_key_hereconfig
BRIDGE_UX_SPECS_DIRconfig
BROWSER_DISABLE_SANDBOXconfig
CEREBRO_API_URLconfig
CEREBRO_RERANKER_URL🔐 secret
DEEPSEEK_API_KEY— your_key_hereconfig
DISCORD_WEBHOOK_URLconfig
EMBEDDING_TIMEOUTconfig
ENABLE_KNOWLEDGEconfig
ENABLE_PROJECT_WATCHERconfig
ENABLE_SEMANTIC_CACHE🔐 secret
GEMINI_API_KEY🔐 secret
GITHUB_TOKEN🔐 secret
GOTIFY_TOKENconfig
GOTIFY_URL🔐 secret
GROQ_API_KEYconfig
HOSTNAMEconfig
KNOWLEDGE_DB_PATH— ~/.local/share/securellm/knowledge.dbconfig
LLAMA_CPP_URL🔐 secret
LLM_API_KEYconfig
LLM_API_TIMEOUTconfig
LLM_API_URLconfig
LLM_DEFAULT_MODELconfig
LOG_DIRconfig
LOG_LEVEL— export =debugconfig
METRICS_HOSTconfig
METRICS_PORT— export =9090🔐 secret
MISTRAL_API_KEYconfig
NATS_URLconfig
NEUTRON_SIEM_DIRconfig
NIXOS_HOST_NAMEconfig
NTFY_TOPIC🔐 secret
NVIDIA_API_KEYconfig
NVIM_LISTEN_ADDRESS🔐 secret
OPENAI_API_KEY— your_key_here🔐 secret
OPENROUTER_API_KEYconfig
PHANTOM_URLconfig
PROJECT_ROOT— /path/to/your/projectconfig
PUPPETEER_EXECUTABLE_PATH🔐 secret
REPLICATE_API_TOKENconfig
REQUEST_DEDUPE_CLEANUP_INTERVALconfig
REQUEST_DEDUPE_STALE_TIMEOUTconfig
SECURELLM_MCP_VERSIONconfig
SEMANTIC_CACHE_DB_PATHconfig
SEMANTIC_CACHE_EXCLUDE_TOOLSconfig
SEMANTIC_CACHE_HIGH_SIMILARITY_THRESHOLDconfig
SEMANTIC_CACHE_HOT_MAX_ENTRIESconfig
SEMANTIC_CACHE_MAX_CANDIDATESconfig
SEMANTIC_CACHE_MAX_ENTRIESconfig
SEMANTIC_CACHE_MAX_RESPONSE_BYTESconfig
SEMANTIC_CACHE_MIN_QUERY_LENGTHconfig
SEMANTIC_CACHE_THRESHOLDconfig
SEMANTIC_CACHE_TTLconfig
SPECTRE_PROXY_URLconfig
SPIDER_NIX_BINconfig
SSH_SESSION_DB_PATHconfig
TOOL_LIMITER_CONCURRENCYconfig
TOOL_LIMITER_DEFAULT_TIMEOUTconfig
TOOL_LIMITER_GLOBAL_MAX_CONCURRENCYconfig
TOOL_LIMITER_MAX_QUEUE_SIZEconfig
TOOL_LIMITER_TIMEOUTSconfig
USAGE_DB_PATHconfig
XDG_DATA_HOME// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/voidnxsec-securellm-mcp-axq3ss)commit: bbc65cd4efa6a29645eaa58718a4e6f0caf72f4e
code hash: 69cba73d403269f7ff278a54b84cf7143ef5204c223418f7c9d924b26d8eb16c
verified: 6/22/2026, 1:11:54 PM