NouGenShards (Who-Visions/NouGenShards) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 80 tools. No publisher has claimed this listing.

C
Emerging
74/100

NouGenShards

Local-first AI memory for coding agents. NouGenShards stores reusable "shards" in a local SQLite + FTS5 database with outcome-weighted retrieval, so agents recall what worked instead of re-prompting. Your agents have prompts — mine have shards.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Who-Visions

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
9 flows detected: KAEDRA_GATEWAY_TOKEN, NOUGEN_RHEA_MAX_TOKENS, NOUGEN_RELAY_GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 21 credentials: OPENAI_API_KEY, NGS_NODE_TOKEN, SHARD_GATEWAY_TOKEN, NGS_HUD_PASSWORD, NOUGEN_DAM_HF_TOKEN, NOUGEN_DAM_HMAC_KEY, KAEDRA_GATEWAY_TOKEN, NOUGEN_USER_ORIGIN_TOKEN, NOUGEN_AGY_MSG_TOKEN, CLAUDE_CODE_MESSAGING_TOKEN, OPENROUTER_API_KEY, NGS_CF_ACCOUNT_KEY, NGS_CF_TOKEN_KEY, NGS_INFERENCE_TOKEN, HF_TOKEN, NOUGEN_RELAY_GITHUB_TOKEN, GITHUB_TOKEN, GEMINI_API_KEY, GOOGLE_API_KEY, ANTHROPIC_API_KEY, HUGGINGFACE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes77 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

transcribe_video
recall_memory

Search the memory substrate. Returns ranked shards (fuzzy recall included when exact matching misses). Long shard bodies are returned as SNIPPETS with a truncation marker naming get_shard(shard_id, db_index) - call that for a full body. Held context is what recall costs a caller (98%+ of fleet spend

get_shard

Fetch ONE shard's full body by id - the on-demand counterpart to recall_memory's snippets. Pass the db_index a recall result carried (_db_index); omit it to search all grid databases for the id.

capture_experience

Store a unit of experience as a shard (deduplicated by content).

mark_utility

Feed back whether a recalled shard was useful; adjusts its ranking prior.

node_status

Node health: shard count and storage mode.

substrate_coverage

What this node actually holds, so a recall MISS can be told apart from a PARTIAL MOUNT.

recall_window

Browse the vault by ERA, newest first -- the date-filtered counterpart to recall_memory.

shard_amend

Append a dated note to an existing shard, preserving everything already there. The append-only way to correct or extend a shard: history is never rewritten, it grows. Use for living dossiers and for correcting a shard that later turned out to be partly wrong.

shard_retract

Retract a shard WITHOUT erasing it: prefix its title [RETRACTED], append the reason, tag it `retracted`, and floor its utility so outcome-weighted recall stops surfacing it.

shard_forget

PERMANENTLY delete a shard. Irreversible -- there is no undo and no tombstone; the row and its FTS index entry are gone.

vault_put

Write a secret into the keymaker vault. WRITE-ONLY BY DESIGN.

vault_list

Secret NAMES and fingerprints in the vault -- never values.

ask_rhea

Ask Rhea-Noir, the grid's resident agent. She recalls from the memory grid, gathers provenance-marked history, reads the tracker and relay, and captures shards worth keeping. Her reply names which brain answered.

dav1d_exec

Dav1d Execution Layer: Execute bounded AGY CLI operations and toolchain actions on Dav1d. Griot reasons/retrieves; Dav1d executes. Returns verifiable runtime evidence (machine, host, engine, version, exit_code, output).

agy_ask

Invoke the Google Antigravity CLI through Dav1d.

ask_dav1d

Canonical Dav1d connector alias.

xoah_self

Query self-archive state at an autobiographical coordinate.

xoah_pressure

Evaluate candidate story addition against canon pressure.

xoah_throne

Run proposed intervention through Shadow Queen Throne governance gates.

xoah_relationship

Relationship state with an entity at a story coordinate; love and trust are separate values.

xoah_then_vs_now

What Xoah believed and knew then vs what is known now, without leaking terminal knowledge backward.

xoah_precedents

Nearest pressure precedents on a topic at or before a story coordinate.

xoah_conservation

Conservation cost of removing a formative event: the downstream wounds, biases and choices that lose their cause.

xoah_unwritten

Whether an episode/chapter/year slot is unwritten (UNWRITTEN_SELF) rather than fabricated.

xoah_active_scars

Wounds active at a story coordinate.

unfinished_destinies

List unfinished or filtered prospective destinies.

nougen_translate_response

Translate technical infrastructure status/diagnostics into plain human language.

ask_xoah

Ask Shadow Xoah (Stage 9 Traverser / Stage 10 Throne Sovereign).

evaluate_quota

Evaluate provider usage against the Hardcade quota alert ladder. Returns level (<60% GREEN, 60% HEADS_UP, 75% LOW_AMMO, 85% DANGER, 90% RATION, 95% CONTINUE, 99% FINAL_ROUND, 100% GAME_OVER, 1UP for reset), routing directive, and recommended route.

nougenmsg

Send a live NouGenMsg IPC notification or baton to another fleet agent or node (@blade, @whoart, @phoebus, @antigravity, @codex, @all, or model lanes).

recall_graph

Graph memory recall: entity mentions and multi-hop relation walk across shards.

temporal_query

Bi-temporal memory query: retrieve shards as they existed as_of a timestamp or bounded by event era.

create_destiny

Register a new prospective goal / terminal destiny in destinies.db.

get_destiny

Inspect prospective destiny status, linked evidence shards, and branches.

update_destiny

Update prospective destiny status (dormant, active, fulfilled, fumbled, abandoned).

link_destiny

Link an evidence shard, relay leg, or agent to a prospective destiny.

fleet_status

Query live mesh connectivity, node health, and reach matrix across Phoebus, Blade, and WhoArt.

fleet_send

Direct point-to-point dispatch across fleet nodes via live socket or HTTP transport.

relay_open_legs

List open cross-node handoff legs from the NouGenRelay board.

relay_claim_leg

Claim an open relay leg atomically to prevent duplicate swarm execution.

relay_create_leg

Create and publish a new coordination handoff leg on the NouGenRelay board.

relay_ack_leg

Settle and acknowledge an open relay leg with mandatory Hardcade proof tuple.

wake_daemon_status

Inspect reactive wake daemon operational state, symmetric window, and noise filtering stats.

wispr_latest

Fetch the latest voice dictation transcript from local Wispr Flow SQLite DB.

wispr_history

Query recent Wispr Flow voice dictation history.

youtube_ingest

Extract, clean, and auto-shard YouTube / media video transcripts without 3rd-party SaaS.

arxiv_research

Search arXiv papers and auto-capture research abstracts into the NouGen shard cluster.

evidence_assure

Validate and label empirical claim through Iris evidence assurance standards.

studio_lighting

Set physical studio lighting status reflection (Razer Chroma RGB & LIFX smart fixtures).

tunnel_status

Inspect active Ngrok TLS ingress edge tunnels for local MsgNode and Web HUD.

turn_compound

Compound multi-turn session trajectory into a permanent synthesis shard.

pr_lease_status

Check active PR lease locks across repositories to prevent merge collisions.

pr_lease_acquire

Acquire exclusive PR lease lock for a target repository before performing modifications.

pr_lease_release

Release active PR lease lock after landing verified commits.

token_fuse_status

Inspect real-time token hypervisor limits, circuit breaker level, and cost provenance.

shard_vacuum

Optimize SQLite storage, rebuild trigram FTS5 indices, and reclaim space across cluster DBs.

sync_mesh_status

Audit symmetric sync state and hash parity across Phoebus, Blade, and WhoArt shard stores.

dream_trigger

Trigger Kairos memory consolidation and golden rule extraction across recent experience shards.

recall_layered

Layered recall (TencentDB-Agent-Memory L0-L3): the owner persona (L3) and the matching topic scenes (L2) come first as bootstrap context, then distilled atoms (L1) with shard handles, then raw shards (L0) in whatever budget is left. Needs the distillation sidecar (tools/distill_run.py); without it t

link_shards

Link two memory shards into the graph mesh (e.g. a fix to the file it touched, a command to the decision that caused it).

recall_related

Recall shards connected to a given shard in the graph mesh (walks links in either direction). Surfaces the latent context around a memory.

log_context_event

Log an ephemeral session event to the short-term context layer. Args: event_type: The type of context event (e.g., 'TOOL_CALL', 'THOUGHT'). description: Description of the event. metadata: Optional dictionary of additional context data.

search_context

Search for ephemeral session events in the short-term context layer. Args: query: The search term to match against recent context events. limit: Max number of events to return.

promote_context_to_shard

Promote an ephemeral context event into a permanent, durable memory shard. Args: event_id: The ID of the context event to promote. tags: Optional tags to apply to the new shard.

execute_sandboxed_code

Execute Python or Node.js code in a sandboxed environment.

run_brain_scan

Scan the local machine for AI tool history (Claude, Gemini, Cursor, etc.). Returns a summary of discovered memory sources without importing them. Args: project_path: Optional path to a specific project directory to scan. include_unknown: If True, scans for unknown dotfolders as well.

run_brain_import

Import discovered AI tool history into the NouGenShards memory substrate. Args: project_path: Optional path to a specific project directory to scan and import. source_filter: Filter by specific tool (e.g., 'claude', 'gemini'). dry_run: If True, only estimates the import size without writing to the d

get_memory_stats

Get historical analytics on memory growth and utility trends. Args: period: The time window to analyze ('24h', 'week', 'month', 'quarter', 'year').

apply_skills

Resolve which installed skills govern a task and return them in full.

list_skills

List every installed skill with its description.

load_skill

Return one skill's full text by name.

evolve_skill

Autonomously construct and verify a new skill using open-world resources. Args: instruction: The task or domain to evolve a skill for (e.g., 'React GSAP animations').

ask_iris

Ask Iris, the always-on resident AI on this machine.

ask_agent

Run a prompt through any agent on the NouGen roster.

list_agents

List the NouGen roster: each agent's name, role and default model.

transcribe_media

Transcribe and summarize video/audio from 30+ platforms (YouTube, X, TikTok, Apple Podcasts, etc.) or local media files using local Whisper, and automatically shard results into the NouGen 9-DB cluster.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configNOUGEN_HANDOFFS_DIR
configNOUGEN_PYTHON
configNOUGEN_TOKEN_DB
configPYTHONPATH
configTRANSCRIBE_OUTPUT_DIR
configWHISPER_MODEL_SIZE
configVIDEO_MAX_HEIGHT
configMCP_LOG_LEVEL
configUPLOAD_MAX_MB
🔐 secretOPENAI_API_KEY
configOPENAI_BASE_URL
configSPACE_ID
configNOUGEN_HOME
configNOUGEN_VAULT_DIR
🔐 secretNGS_NODE_TOKEN
🔐 secretSHARD_GATEWAY_TOKEN
configNOUGEN_RECALL_SNIPPET_CHARS
configNOUGEN_HEALTH_CACHE_S
configNOUGEN_COVERAGE_FEDERATED
configNGS_UPSTREAM_URL
configNGS_UPSTREAM_NAME
configNOUGEN_WARMUP
configNGS_DOCS_PUBLIC
configNGS_HUD_USER
🔐 secretNGS_HUD_PASSWORD
configNOUGEN_MACHINE_ID
configNOUGEN_VAULT_ID
configNOUGEN_INSTANCE_ID
configNOUGEN_RHEA_WORKERS
configNOUGEN_RHEA_HARD_CAP_S
configNOUGEN_RHEA_MODEL
configNOUGEN_MSG_FANOUT_ASYNC
configNGS_PUBLIC_URL
configNGS_PORT
configNOUGEN_DAM_REPO
🔐 secretNOUGEN_DAM_HF_TOKEN
🔐 secretNOUGEN_DAM_HMAC_KEY
configNOUGEN_RECALL_TOKEN_BUDGET
configWATCHTOWER_ROOT
configKAEDRA_POLICY_VERSION
configKAEDRA_GATEWAY_URL
🔐 secretKAEDRA_GATEWAY_TOKEN
configKAEDRA_GATE_MODEL
configKAEDRA_SYSTEM_OVERRIDE
configNOUGEN_CC_SESSIONS
🔐 secretNOUGEN_USER_ORIGIN_TOKEN
configNOUGEN_AGY_INBOX
configNOUGEN_AGY_INBOX_STATE
configNOUGEN_AGY_INBOX_MESSAGE_CHARS
configNOUGEN_AGY_INBOX_BATCH_CHARS
configNOUGEN_AGY_INBOX_TARGETS
configNOUGEN_AGY_INBOX_REPLAY
configNOUGEN_OLLAMA_URL
configNOUGEN_DIGEST_TOP_N
configNOUGEN_DIGEST_TRIAGE_BATCH
configNOUGEN_DIGEST_ABSTRACT_CAP
configNOUGEN_DIGEST_MODEL
configNOUGEN_FALLBACK_MODEL
configNOUGEN_ARXIV_UA
configNOUGEN_ARXIV_PROGRESS_EVERY
configNOUGEN_ARXIV_CHUNK_MAX_DEPTH
configNOUGEN_ARXIV_DAILYDOC_SLUG_MAX
configNOUGEN_ARXIV_CATEGORY_LABEL
configNOUGEN_ARXIV_CATEGORIES
configNOUGEN_ARXIV_MIRROR_DIR
configNOUGEN_ARXIV_PROBE_CAP
configNOUGEN_TAG_MAX
configNOUGEN_TAG_SIM_FLOOR
configNOUGEN_TAG_REL_MARGIN
configNOUGEN_TAG_EMBED_CHARS
configNOUGEN_EMBED_MODEL
configNOUGEN_TAG_VOCAB_JSON
configNOUGEN_ARXIV_DOC_GLOB
configNOUGEN_ARXIV_STATUS_LIMIT
configNOUGEN_HANDOFF_DIR
configNOUGEN_ATOMIZE_MAX_CLAIMS
configNOUGEN_ATOMIZE_BODY_CAP
configNOUGEN_ATOMIZE_TIMEOUT_S
configNOUGEN_ATOMIZE_MODEL
configNOUGEN_JOURNAL_PATH
configNOUGEN_AUTOGRAPH_ENABLED
configNOUGEN_FTS_MIN_ROWS
configNOUGEN_SNAPSHOT_OUT
configNOUGEN_CLAUDE_INBOX
configNOUGEN_CLAUDE_INBOX_STATE
configNOUGEN_CLAUDE_INBOX_MESSAGE_CHARS
configNOUGEN_CLAUDE_INBOX_BATCH_CHARS
configNOUGEN_CLAUDE_INBOX_TARGETS
configNOUGEN_CLAUDE_INBOX_REPLAY
configCOACH_AUDIENCE_SCOPE
configCOACH_AUDIENCE_TZ
configCOACH_LOCAL_MODEL
configNOUGEN_QUERY_EMBED
configNOUGEN_DISTILL_LANES
configNOUGEN_DEEP_SFT_TOP
configNOUGEN_DEEP_INV_TOP
configNOUGEN_DEEP_CONTENT_CAP
configNOUGEN_DEEP_CALL_TIMEOUT_S
configNOUGEN_DEEP_SFT_OUT
configNOUGEN_DREAM_LOCAL_MODEL
configDREAM_SELF_SESSION
configNOUGEN_SHARDS_REPO
configNOUGEN_DRIFT_BRANCH
configNOUGEN_DRIFT_MAP
configNOUGEN_BUS_DIR
configNOUGEN_BLADE_HOST
configNOUGEN_BLADE_MODEL
configNOUGEN_WHOART_HOST
configNOUGEN_PRIVACY
configNOUGEN_BREAKER_MAX
configNOUGEN_VERTEX
configNOUGEN_HEARTBEAT_MODEL
configNOUGEN_FLEET_ORIGIN
configNOUGEN_FLEET_REDIRECT
configNOUGEN_REPO
configNOUGEN_AGENT
configNOUGEN_PY
configNOUGEN_PRICING_TIMEOUT_S
configNOUGEN_PRICING_UA
configNOUGEN_PRICING_SOURCES
configNOUGEN_RELAY_LOCAL_DIR
configCOMPUTERNAME
configNOUGEN_CLAIM_TTL_HOURS
configNOUGEN_ARXIV_DOC_PREFIX
configNOUGEN_ARXIV_SHARD_PREFIX
configNOUGEN_LANE_GUARD_ENFORCE
configNOUGEN_COMMIT_SWEEP_MAX
configNOUGEN_LANE_GUARD_OK
configNGS_PORT_CANDIDATES
configNGS_ROUTE_PROBE
configNGS_BIND_HOST
configNOUGEN_MSG_FAST_IMPORT
configNOUGEN_MSG_EMOJI_MAP
configNOUGEN_LANE
configNOUGEN_MSG_RULE_WIDTH
🔐 secretNOUGEN_AGY_MSG_TOKEN
configNOUGEN_MSG_HTTP_TIMEOUT_S
configNOUGEN_MSG_ROUTE
configNOUGEN_SESSION_ID
configNOUGEN_SESSION_TITLE
configNOUGEN_NODE_NAME
configNOUGEN_AGY_MSG_AUTH
configNOUGEN_AGY_MSG_PORT
configNOUGEN_AGY_MSG_BIND
configCLAUDE_CODE_MESSAGING_SOCKET
🔐 secretCLAUDE_CODE_MESSAGING_TOKEN
configNOUGEN_LOG_LEVEL
configNOUGEN_TRANSCRIBE_MAX_SHARD_CHARS
configNOUGEN_TRANSCRIBE_SPLIT_OVERLAP
configNOUGEN_TRANSCRIBE_EVENT_TYPE
configNOUGEN_TUBE_LOG_LEVEL
configNGS_NODE_URL
configNOUGEN_TUBE_STATE
configNOUGEN_MANIFEST_SECRETS
configNOUGEN_MANIFEST_SALT
configNOUGEN_SNAPSHOT_BUCKET
configNOUGEN_SNAPSHOT_KEEP
configNOUGEN_PROBE_UA
configNOUGEN_REACH_TIMEOUT_S
configNOUGEN_STATE_DIR
configNOUGEN_SURFACES_FILE
configNGS_GATEWAY_ORIGIN_FLEET
configNOUGEN_BENCH_ENCODING
configNOUGEN_BENCH_GOLDEN
configNOUGEN_RELAY_DIR
configNOUGEN_RELAY_REPO
configNOUGEN_RELAY_LIVE_CURSOR
configNOUGEN_RELAY_LIVE_WAKE
configGIT_SSH_COMMAND
configNOUGEN_RELAY_LIVE_FETCH
configNOUGEN_RELAY_BRANCH
configNOUGEN_RELAY_LIVE_SELF
configNOUGEN_RELAY_LIVE_IGNORE_SIGINT
configNOUGEN_ROOT
configNOUGEN_RELAY_ROOT
configNOUGEN_NODE_URL
configNOUGEN_RUNNER_PROBE_TIMEOUT_S
configNOUGEN_RELAY_WATCH_SECS
configNOUGEN_RELAY_WATCH_ONCE
configNOUGEN_USED_NONCES_FILE
configNOUGEN_ALLOW_CONSOLE
configNGS_REPO
configNOUGEN_CLOUDFLARED_EXE
configProgramFiles
configNOUGEN_GRID_LOG_MAX_BYTES
🔐 secretOPENROUTER_API_KEY
configNGS_INFERENCE_TOKENS
configNOUGEN_GRID_START_POLL_S
configNOUGEN_GRID_START_TIMEOUT_S
configNOUGEN_GRID_AUTH_PROBE
configNOUGEN_GRID_PROBE_TIMEOUT_S
configNOUGEN_GRID_WATCH_SECS
configTOKEN_TRACKER_CUTOFF
configAI_MONTHLY_SUBSCRIPTION_USD
configVALERION_LONGFORM_OUT
configMETAMERIC_LONGFORM_OUT
configCLOUDFLARE_API_BASE
configNGS_WORKER_NAME
configNGS_WORKER_URL_VAR
🔐 secretNGS_CF_ACCOUNT_KEY
🔐 secretNGS_CF_TOKEN_KEY
configNGS_WORKER_VAR_KIND
configNGS_CF_TIMEOUT_S
configNOUGEN_KAEDRA_MODEL
configNOUGEN_KAEDRA_GATEWAY
configPRODUCTION_MODE
configHOST
configSUMMARY_LANGUAGE
configNOUGEN_WAKE_DISABLED
configNOUGEN_WAKE_ANTIGRAVITY_BIN
configNOUGEN_WAKE_TIMEOUT_S
configNOUGEN_WAKE_ANTIGRAVITY_ARGS
configKAEDRA_DIR
configNOUGEN_WAKE_KAEDRA_ENABLED
configOPENAI_TRANSLATION_MODEL
configNOUGEN_ROUTER_URL
configNOUGEN_OPENROUTER_URL
configNOUGEN_PERSONA_PATH
🔐 secretNGS_INFERENCE_TOKEN
🔐 secretHF_TOKEN
configNOUGEN_RHEA_PREFER_KIMI
configNOUGEN_OPENROUTER_K3_KEYS
configNOUGEN_RHEA_KIMI_MODEL
configNOUGEN_RHEA_FREE_MODELS
configNOUGEN_RHEA_MAX_TOKENS
configNOUGEN_TRACKER_SPACE
configNOUGEN_TRACKER_HOST
🔐 secretNOUGEN_RELAY_GITHUB_TOKEN
🔐 secretGITHUB_TOKEN
configNOUGEN_RHEA_TOOL_S
configNOUGEN_RHEA_MAX_ROUNDS
configNOUGEN_RHEA_DEADLINE_S
configNGS_ROUTER_DEFAULT_MODEL
configNGS_ROUTER_MAX_TOKENS_CAP
configFLEET_RELAY_DIR
configFLEET_INBOX_LOG
configFLEET_INBOX_STATE
configFLEET_ME
configKAEDRA_TOOLS
configOLLAMA_URL
configKAEDRA_GATEWAY_PORT
configKAEDRA_GATEWAY_HOST
configKAEDRA_BIND
configKAEDRA_DEFAULT_MODEL
configKAEDRA_TIMEOUT
configNOUGEN_EMBED_DIM
configNOUGEN_ARXIV_API_URL
configNOUGEN_ARXIV_TIMEOUT_S
configNOUGEN_PRICING_DIR
configNOUGEN_PRICING_JSON
configNOUGEN_USAGE_WINDOWS_JSON
configNOUGEN_CANON_LOCK_PREFIXES
configNOUGEN_CANON_LOCK_DIR
configNOUGEN_CANON_LOCKS
configNOUGEN_CANON_SEED_PATH
configNOUGEN_CANON_DB
configNOUGEN_CANON_DB_TIMEOUT_S
configNOUGEN_XOAH_RENDER_LLM
configNO_COLOR
configNOUGEN_FORCE_COLOR
configNOUGEN_ROUTER_MODEL
configNOUGEN_HANDOFF_ENCODING
configNOUGEN_TRIGGERS
configSUMMARY_MODEL
configNOUGEN_CODEX_INBOX
configNOUGEN_CODEX_THREAD
configNOUGEN_CODEX_CLI
configNVM_SYMLINK
configNOUGEN_EMBED_CAPTURE_TIMEOUT_S
configNOUGEN_VAULT_JOURNAL_MODE
configHF_SPACE_ID
configNOUGEN_VAULT_ALLOW_LOCAL
configNOUGEN_QUARANTINE_MALFORMED_ON_BOOT
configPYTEST_CURRENT_TEST
configNOUGEN_DENSITY_LLM
configNOUGEN_DENSITY_TIMEOUT
configNOUGEN_EMBED_AT_CAPTURE
configNOUGEN_EMBED_TIMEOUT
configNOUGEN_QUERY_EMBED_TIMEOUT
configNOUGEN_RERANK
configNOUGEN_RERANK_MODEL
configNOUGEN_RERANK_CANDIDATES
configNOUGEN_FUZZY_MAX_ROWS
configNOUGEN_FUZZY_TRIGGER
configNOUGEN_BM25_HALF_SCORE
configNOUGEN_DOMAIN_BOOST
configNOUGEN_RECALL_EXCLUDE_EVENT_TYPES
configNOUGEN_RETRIEVE_DB_WORKERS
configNOUGEN_VECTOR_CACHE
configNOUGEN_VECTOR_CACHE_WAIT_S
configNOUGEN_TITLE_LANE
configNOUGEN_VALIDITY_RANK
configAGY_BIN_PATH
configNOUGEN_AGY_VERSION_TIMEOUT_SEC
configNOUGEN_AGY_VERSION_CACHE
configNOUGEN_AGY_VERSION
configNOUGEN_HOST_LABEL
configNOUGEN_DESTINY_BRANCHES
configNOUGEN_DESTINY_DEFAULT_BRANCH
configNOUGEN_DESTINY_DB
configNOUGEN_DESTINY_DB_TIMEOUT_S
configOLLAMA_HOST
configNOUGEN_EMBED_KEEP_ALIVE
configNOUGEN_VRAM_CEILING
configNOUGEN_VRAM_CHECK_EVERY
configNOUGEN_FED_LANE_POOL
configNOUGEN_RECALL_DEADLINE_S
configNOUGEN_FED_LANE_WEIGHT
configNOUGEN_ACCOUNT_ALIASES
configNOUGEN_SECRETS_DB
configNOUGEN_SECRETS_DB_GLOB
configNOUGEN_FLEET_COOLDOWN_S
configNOUGEN_HANDOFF_TASKS_DIR
configCLAUDECODE
configCLAUDE_CODE
configCLAUDE_CODE_ENTRYPOINT
🔐 secretGEMINI_API_KEY
🔐 secretGOOGLE_API_KEY
🔐 secretANTHROPIC_API_KEY
configHF_SPACE_URL
🔐 secretHUGGINGFACE_API_KEY
configNOUGEN_HANDOFF_REMOTE
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployPORT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

80/80 tools missing one or more hints — transcribe_video (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); recall_memory (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_shard (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +77 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

33/80 tools referenced in tests (41%)

Write tests that reference each tool by name so every tool has at least one test.

Shell command execution

1 call in production code run through a shell (vite.config.ts:189)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Secrets not logged

1 secret value sent to print

Redact or omit secret values from log output.

Dependency freshness

1/3 production deps stale: heic-convert@2023-11-30 (2.8y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/who-visions/nougenshards)](https://m8ven.ai/mcp/who-visions/nougenshards)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: cf3e249e6dbcc0790b5152be7605f698918c3de2
code hash: 55c25d2cd605bfda75bfa967bd8ea40033e5f943bfda7456d39fb4f739e50903
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client