Back to MCP Trust Indexm8ven
67
/ 100
1 day ago
glama

Generic MCP Gateway

A universal agent gateway that integrates MCP tools (memory, reminders, web search, email, calendar, etc.) with multi-channel messaging (Telegram, QQ) and a heartbeat system for autonomous life simulation.

→ xiaoyu-sweet/mcp-gateway· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 18 credentials: SUPABASE_KEY, MEM0_API_KEY, API_SECRET, OPENAI_API_KEY, CHAT_API_KEY, DEFAULT_API_KEY, TG_BOT_TOKEN, PINECONE_API_KEY, RESEND_API_KEY, SILICON1_API_KEY, VISION_API_KEY, VOICE_API_KEY, DOUBAO_API_KEY, AMAP_API_KEY, TAVILY_API_KEY, HCTI_API_KEY, WEBDAV_PASSWORD, REPLICATE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configSUPABASE_URL
🔐 secretSUPABASE_KEY
🔐 secretMEM0_API_KEY
🔐 secretAPI_SECRET— ✅ 管理接口鉴权：所有 /api/ 接口强制校验 密钥
configOPENAI_MODEL_NAME— 必填：OPENAI_API_KEY、
configOPENAI_BASE_URL— 替换 LLM：只需修改 和 OPENAI_MODEL_NAME（或配置多角色 CHAT_ / VISION_ / VOICE_）
configCHAT_BASE_URL
configDEFAULT_BASE_URL
🔐 secretOPENAI_API_KEY— LLM 的 API Key
🔐 secretCHAT_API_KEY
🔐 secretDEFAULT_API_KEY
configCHAT_MODEL_NAME
configDEFAULT_MODEL_NAME
configAI_NAME
configAI_PERSONA
configCHAT_TAG
configHEARTBEAT_INTERVAL
configDIARY_TIME
🔐 secretTG_BOT_TOKEN— Telegram 轮询 配置了 长轮询
configMEM0_USER_ID
configSUMMARIZE_INTERVAL
configGOOGLE_USER_TOKEN_JSON— 日程小秘书 配置了 07:30 / 22:00
configSCHEDULE_MORNING_TIME
configSCHEDULE_EVENING_TIME
configGMAIL_BRIDGE_URL— 信箱巡视器 配置了 (默认注释) 5 分钟
configSYNC_KEYS
configNAPCAT_WS_URL
configNAPCAT_HTTP_URL
configNAPCAT_BOT_QQ
configNAPCAT_TARGET_USER
configNAPCAT_NOTIFY_QQ
configNAPCAT_ALLOWED_GROUPS
configNAPCAT_NOTIFY_TG
configNAPCAT_RECONNECT_DELAY
configNAPCAT_BACKOFF_FACTOR
configNAPCAT_MAX_DELAY
configSUMMARY_THRESHOLD
🔐 secretPINECONE_API_KEY
configPINECONE_INDEX_NAME
configMY_EMAIL
configADMIN_EMAIL
🔐 secretRESEND_API_KEY
🔐 secretSILICON1_API_KEY
configSILICON1_BASE_URL
configSILICON1_MODEL_NAME
🔐 secretVISION_API_KEY
configVISION_BASE_URL
configVISION_MODEL_NAME
🔐 secretVOICE_API_KEY
configVOICE_BASE_URL
🔐 secretDOUBAO_API_KEY
configDOUBAO_EMBEDDING_EP
configTG_CHAT_ID— Telegram 不推送 没配 TG_BOT_TOKEN / 检查 .env
🔐 secretAMAP_API_KEY
🔐 secretTAVILY_API_KEY
configGOOGLE_CALENDAR_ID
configHCTI_API_ID
🔐 secretHCTI_API_KEY
configWEBDAV_URL
configWEBDAV_USER
🔐 secretWEBDAV_PASSWORD
🔐 secretREPLICATE_API_KEY
configMUSIC_MODEL_VERSION
configVOICE_MODEL_VERSION
configPORT— 端口：平台会自动注入 ，无需手动设
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/xiaoyu-sweet-mcp-gateway-1c24e7)](https://m8ven.ai/mcp/xiaoyu-sweet-mcp-gateway-1c24e7)
commit: e8612f752f0381dc6cb84362b7d1fbe6fd46aea1
code hash: 044cedd601ead041caadb5c41691e3b8276245f6839e77fcdb30c7df392e06f8
verified: 7/30/2026, 8:37:55 AM
view raw JSON →