Emerging

74/100

2 days ago

Rynmesh

Item: Rynmesh
Rating: 74
Author: M8ven

Enables AI operators to interact with a local-first personal AI assistant, including content discovery, recommendations, signed content publishing, and peer exchange through MCP tools.

→ yeogirlyun/rynmesh · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

yeogirlyun

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: RYNMESH_LOCAL_TOKEN, RYNMESH_NETWORK_KEY, SIGNAL50_API_TOKEN, ANTHROPIC_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configRYNMESH_PEER_PORT

configRYNMESH_ALLOW_MANUAL_POSITIVE_CREDITS

configRYNMESH_MACHINE_IP

configRYNMESH_NODE_NAME

configRYNMESH_DESKTOP_MODE

configRYNMESH_REGISTRY_URL

configRYNMESH_HOME

configRYNMESH_FETCH_TIMEOUT_S

configRYNMESH_UPDATE_PUBLISHER_KEYS

configRYNMESH_AUTO_REGISTER

configRYNMESH_NETWORK_ID

configRYNMESH_UPDATE_CONFIRM_S

configRYNMESH_UPDATE_POLL_S

🔐 secretRYNMESH_LOCAL_TOKEN

configRYNMESH_ACCESS_TEAM_DOMAIN

configRYNMESH_ACCESS_AUD

🔐 secretRYNMESH_NETWORK_KEY

configRYNMESH_ALLOW_REMOTE_CONTROL

configRYNMESH_DISCOVERY_MAX_AGE_HOURS

configRYNMESH_LOCAL_BODY_MAX_BYTES

configRYNMESH_DEFAULT_DISCOVERY

configRYNMESH_PEER_HOST

configRYNMESH_WEBUI_DIR

configRYNMESH_REGISTRY_DIRexport ="$HOME/.rynmesh/registry"

configRYNMESH_REGISTRY_HOSTexport ="0.0.0.0"

configRYNMESH_REGISTRY_PORTexport ="8790"

configRYNMESH_REGISTRY_URLS

configRYNMESH_RELAY_MAX_BLOB_BYTES

configRYNMESH_RELAY_DOWNLOAD_TIMEOUT_S

configRYNMESH_RELAY_DIRECT_UPLOAD_MAX_BYTES

configRYNMESH_RELAY_CHUNK_BYTES

configSIGNAL50_MEDIA_OPS_HOST

configSIGNAL50_MEDIA_OPS_PORT

configSIGNAL50_MEDIA_OPS_WORK_DIR

configSIGNAL50_MEDIA_OPS_LOCK_FILE

configRYNMESH_RELAY_URL

configSIGNAL50_REPO

configSIGNAL50_MEDIA_OPS_JOB_TIMEOUT_SEC

configRYNMESH_VEO_CAPABILITY

configSIGNAL50_API_URL

configRYNMESH_MEDIA_OPS_JOB_POLL_SEC

configRYNMESH_SIGNAL50_JOB_POLL_SEC

configRYNMESH_MEDIA_OPS_TIMEOUT_SEC

configAVARYN_REPO

configRYNMESH_SIGNAL50_API_TIMEOUT_SEC

🔐 secretSIGNAL50_API_TOKEN

configSIGNAL50_MEDIA_OPS_URL

configRYNMESH_SIGNAL50_VEO_WORK_DIR

configRYNMESH_SIGNAL50_VEO_MAX_SCENES_DEFAULT

configRYNMESH_VEO_WORKER_POLL_SEC

configRYNMESH_VEO_WORKER_JOB_TIMEOUT_SEC

configRYNMESH_VEO_PRICE_CREDITS

configRYNMESH_NETWORK_DIR

configRYNMESH_MACHINE_NAME

configCOMPUTERNAME

configRYNMESH_TRUSTED_ROOTS

configRYNMESH_PROPAGATE_SERVE_RECEIPTS

configRYNMESH_PEER_ENDPOINT

configRYNMESH_PEER_PUBLIC_HOST

configRYNMESH_TRANSPORT

configRYNMESH_HTTPS_PROXY

configRYNMESH_HTTP_PROXY

configRYNMESH_TLS_SNI

configRYNMESH_CONNECT_HOST

configRYNMESH_CDN_WS_URL

configRYNMESH_IMPERSONATE

configRYNMESH_MEEK_URL

configRYNMESH_ECH_CONFIGS

configRYNMESH_EMBED_BACKEND

configRYNMESH_IMAGE_BACKEND

configRYNMESH_LLM_BACKEND

configRYNMESH_OLLAMA_URL

configRYNMESH_OLLAMA_MODEL

configRYNMESH_ANTHROPIC_MODEL

🔐 secretANTHROPIC_API_KEY

configRYNMESH_MODEL_PROVIDER

configRYNMESH_EGRESS_EXIT_HOST

configRYNMESH_EGRESS_EXIT_USER

configRYNMESH_EGRESS_EXIT_PORT

configRYNMESH_EGRESS_REGION

configRYNMESH_EGRESS_SOCKS_PORT

configRYNMESH_EGRESS_MAX_TTL_S

configRYNMESH_EGRESS_PRICE_CREDITS

configRYNMESH_EGRESS_TRANSPORT

configRYNMESH_EGRESS_OVERLAY_IP

configRYNMESH_EGRESS_HYSTERIA_HOST

configRYNMESH_EGRESS_HYSTERIA_UDP_PORT

configRYNMESH_EGRESS_HYSTERIA_AUTH

configRYNMESH_EGRESS_HYSTERIA_SNI

configRYNMESH_EGRESS_HYSTERIA_OBFS

configRYNMESH_EGRESS_HYSTERIA_UP_MBPS

configRYNMESH_EGRESS_HYSTERIA_DOWN_MBPS

configRYNMESH_EGRESS_HYSTERIA_TLS_INSECURE

configRYNMESH_EGRESS_HYSTERIA_TLS_PIN

configRYNMESH_PUBLIC_URL

// quality suggestions

Shell command execution

2 child_process/subprocess calls in production code — runs shell commands (rynmesh/peer_http.py:380, rynmesh/services/vpn_cli.py:29)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Domain consistency

npm scope @rynmesh doesn't match GitHub owner yeogirlyun

Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/yeogirlyun-rynmesh-af2aca)](https://m8ven.ai/mcp/yeogirlyun-rynmesh-af2aca)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 5ab71abb124ae9f33d83910c5e7e29fb86ba74ed

code hash: 255c3a79293d9f8b7cca1b32bacb8172bae948be348dd251cba2e5ea2897dfac

verified: 8/18/2026, 3:08:59 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client