41
grade D
13 days ago
glama
mcp-mcpmarket
Enables discovery and automatic installation of MCP servers via mcpmarket.com integration. Searches repositories, scrapes GitHub READMEs for configuration details, and provides one-click installation to MCP clients.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — mcpmarket_categories (line 379: re.exec(html))
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/xzeroone-mcp-mcpmarket-8rzxhq)commit: cd11a15fcd5321aa42fbbcd38d25ee1fd215b794
code hash: 044c99c8ef63575cabcd903753011dfa60b6ef77cb17b2bf0e5d39b12a684173
verified: 4/11/2026, 2:19:50 PM