An AI-agent-first framework for building MCP servers that deliver interactive React widgets directly within AI chat interfaces like ChatGPT and Claude. It includes automated visual testing and a zero-config local development environment designed for autonomous agent workflows.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Happy DOM: VM Context Escape can lead to Remote Code Execution
When Vitest UI server is listening, arbitrary file can be read and executed
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies
Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
process.env. You'll be asked to provide them before it can run.TEST_SERVER_PID[](https://m8ven.ai/mcp/xkloveme-cloud-mcp-1m9nuu)