grok-delegate (zai-one/grok-build-mcp) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it yet. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
—
Grade pending
4 days ago

grok-delegate

Local stdio MCP bridge that delegates coding work to the Grok CLI agent via isolated git worktrees and typed receipts. Provides MCP tools for interacting with the Grok CLI across stdio, WebSocket, and legacy transports.

→ zai-one/grok-build-mcp· listed on glama

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

zai-one

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: GROK_DELEGATE_HTTP_TOKEN, GROK_AGENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configGROK_DELEGATE_LANES_PARENTstill overrides it, and a path in the visible
configGROK_DELEGATE_BIN
configGROK_DELEGATE_SANDBOX
configGROK_SANDBOX
configGROK_DELEGATE_PREWARM
configGROK_DELEGATE_HTTP_HOST
configGROK_DELEGATE_HTTP_PORT
🔐 secretGROK_DELEGATE_HTTP_TOKEN
configGROK_DELEGATE_HTTP_TOKEN_FILE
configGROK_DELEGATE_HTTP_ALLOW_NONLOOPBACK
configGROK_DELEGATE_HTTP_MAX_INFLIGHT
configGROK_DELEGATE_EXPECTED_AGENT_VERSION
configGROK_DELEGATE_WS_ENDPOINT
🔐 secretGROK_AGENT_SECRET
configGROK_DELEGATE_CONCURRENCY
configGROK_DELEGATE_MAX_QUEUED
configXDG_STATE_HOME
configGROK_DELEGATE_SPAWN_PRIORITY
configGROK_DELEGATE_LANE_CLEANUP
configGROK_DELEGATE_ALLOWED_ROOTSdirectory; an agent cannot name one, and still
configGROK_DELEGATE_CLI_LOG_FILE
configGROK_DELEGATE_CLI_LOG
configGROK_DELEGATE_REASONING_EFFORT
configGROK_DELEGATE_MODEL
configGROK_DELEGATE_ECONOMY_COMPACT_POLL
// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/zai-one/grok-mcp)](https://m8ven.ai/mcp/zai-one/grok-mcp)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 6dd13c3bd5c7596f30eabafc13117cc09774c433
code hash: 07d75b45be3d7b465aa3e3af889548e949915d8c99ed5edcfb9d2706ae8dc1cd
verified: 9/8/2026, 7:13:01 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client