Back to MCP Trust Indexm8ven
0
/ 100
12 days ago
glama

daedal-map

Remote MCP server for geographic data. Free and x402 paid packs all normalized for cross domain joins. Start with get_catalog, then get_pack for details.

→ xyver/daedal-map· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GlamaOfficial

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Code appears obfuscated
1 file are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 7 credentials: INDEX402_VERIFY_TOKEN, GOOGLE_MAPS_API_KEY, CLOUD_INTERNAL_API_TOKEN, AWS_SECRET_ACCESS_KEY, SUPABASE_ANON_KEY, ANTHROPIC_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretINDEX402_VERIFY_TOKEN
🔐 secretGOOGLE_MAPS_API_KEY
configSITE_URL
configCOMMERCIAL_ACCESS_ENABLED
configCOMMERCIAL_ACCESS_TIMEOUT_SECONDS
configCOMMERCIAL_ACCESS_VERIFIER_BASE_URL
🔐 secretCLOUD_INTERNAL_API_TOKEN
configAPI_QUERY_MAX_CONCURRENCY_PER_CALLER
configAPI_QUERY_MAX_CONCURRENCY_GLOBAL
configARTIFACT_ACCESS_TOKENS
configDEPLOYMENT
configUSE_WIP_CATALOG
configS3_BUCKET
configS3_PREFIX
configS3_ENDPOINT_URL
configAWS_DEFAULT_REGION
configAWS_REGION
configCOUNTY_MAP_API_CATALOG_OUTPUT_ROOT
configAWS_ACCESS_KEY_ID
🔐 secretAWS_SECRET_ACCESS_KEY
configDUCKDB_MEMORY_LIMIT
configDUCKDB_QUERY_POOL_SIZE
configDUCKDB_CACHE_TTL
configS3_PUBLISHED_PREFIX
configGEOMETRY_CACHE_MAX_MB
configRESEARCH_CREDIT_TIMEOUT_SECONDS
configRESEARCH_CREDIT_VERIFIER_BASE_URL
configHOSTED_RUNTIME_CONTROL_BASE_URL
configHOSTED_RUNTIME_CONTROL_TIMEOUT_SECONDS
configANALYTICS_BG_WORKERS
configQA_DISABLE_RUNTIME_ANALYTICS
configLLM_USAGE_FORCE_QA_SUITE
configLLM_USAGE_FORCE_QA_RUN_ID
configLLM_USAGE_FORCE_QA_LABEL
configAPI_ANALYTICS_IP_SALT
configS3_LIVE_STATE_PREFIX
configCLOUD_URL
configPRIVATE_MCP_BUNDLE_ROOTS
configBROWSER_ARTIFACT_SIGNED_URL_TTL
configRESEARCH_TOOL_MAX_INPUT_ROWS
configARTIFACT_TOKEN_RATE_LIMIT
configARTIFACT_TOKEN_RATE_WINDOW_SECONDS
configARTIFACT_DOWNLOAD_RATE_LIMIT
configARTIFACT_DOWNLOAD_RATE_WINDOW_SECONDS
configCHAT_RATE_LIMIT_WINDOW_SECONDS
configCHAT_RATE_LIMIT_AUTH
configCHAT_RATE_LIMIT_ANON
configCONFIRMED_ORDER_RATE_WINDOW_SECONDS
configCONFIRMED_ORDER_RATE_LIMIT_AUTH
configCONFIRMED_ORDER_RATE_LIMIT_ANON
configPRIVATE_MCP_INFO_CACHE_SECONDS
configPRIVATE_MCP_PROXY_CONNECT_TIMEOUT_SECONDS
configPRIVATE_MCP_PROXY_READ_TIMEOUT_SECONDS
configPRIVATE_MCP_PROXY_BASE_URL
configDAEDALMAP_ACCESS_MODE
configHOSTED_PACK_REF_ALLOWED_HOSTS
configSUPABASE_URL
🔐 secretSUPABASE_ANON_KEY
configDAEDALMAP_PUBLIC_BASE_URL
configS3_PUBLIC_BASE_URL
configDAEDALMAP_ENGINE_CURRENT_URL
configORDER_STATUS_RATE_LIMIT
configORDER_STATUS_RATE_WINDOW_SECONDS
configS3_STAGING_PREFIX
configPACK_RELEASE_MARKERS_PATH
configS3_CONTROL_PREFIX
configRUNTIME_MODE— In =cloud, the runtime:
🔐 secretANTHROPIC_API_KEY— OPENAI_API_KEY or only for the built-in local chat UI.
🔐 secretOPENAI_API_KEY— or ANTHROPIC_API_KEY only for the built-in local chat UI.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/xyver-daedal-map-qrjufw)](https://m8ven.ai/mcp/xyver-daedal-map-qrjufw)
commit: b181a9f3b3e16e0714ff3e7b73b7e2ee952a33df
code hash: 826931ff585b19ebea8be21a130d99568ba8b5a5c66e54eed0743c060347b860
verified: 7/19/2026, 8:48:15 AM
view raw JSON →