Back to MCP Trust Indexm8ven
74
/ 100
2 days ago
github_code

dotfiles

My Neovim configuration

→ zaid-nizam/dotfiles· listed on github_code
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Verified

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
2 flows detected: TELEGRAM_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 5 credentials: DISCORD_BOT_TOKEN, TELEGRAM_BOT_TOKEN, ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, SECRET_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configDISCORD_ACCESS_MODE
🔐 secretDISCORD_BOT_TOKEN
configDISCORD_STATE_DIR
configFAKECHAT_PORT
configIMESSAGE_ACCESS_MODE
configIMESSAGE_ALLOW_SMS
configIMESSAGE_APPEND_SIGNATURE
configIMESSAGE_DB_PATH
configIMESSAGE_STATE_DIR
configTELEGRAM_ACCESS_MODE
🔐 secretTELEGRAM_BOT_TOKEN
configTELEGRAM_STATE_DIR
configCLAUDE_PLUGIN_ROOT
configSECURITY_WARNINGS_STATE_DIR
configCLAUDE_CONFIG_DIR
configSECURITY_GUIDANCE_DEBUG_LOG
configPREVIOUS_FINDINGS_TTL_SEC
🔐 secretANTHROPIC_API_KEY
🔐 secretANTHROPIC_AUTH_TOKEN
configSECURITY_REVIEW_MODEL
configANTHROPIC_BASE_URL
configCLAUDE_CODE_REMOTE
configSG_AGENTIC_CLI_PATH
configSG_DUAL_OR
🔐 secretSECRET_KEY
configSG_AGENTIC_COMMIT_REVIEW
configSG_AGENTIC_MODEL
configSG_AGENTIC_MAX_TURNS
configSG_AGENTIC_CONTEXT_DIR
configCLAUDE_CODE_EXECPATH
configSG_AGENTIC_DEBUG_DIR
configSG_AGENTIC_ITER2
configSG_AGENTIC_DIFF_INTERSECT
configSG_AGENTIC_FILTER
configSG_AGENTIC_NO_ADJUDICATE
configSG_AGENTIC_EXCLUDE_MEDIUM
configDIFF_PER_FILE_BYTES
configDIFF_TOTAL_BYTES
configENABLE_CODE_SECURITY_REVIEW
configENABLE_PATTERN_RULES
configENABLE_COMMIT_REVIEW
configENABLE_STOP_REVIEW
configSECURITY_GUIDANCE_DISABLE
configENABLE_SECURITY_REMINDER
configMAX_STOP_HOOK_FIRINGS
configMAX_DIFF_FILES
configMAX_COMMIT_REVIEWS_PER_HOUR
configMAX_COMMIT_REVIEWS_PER_SESSION
configCOMMIT_REVIEW_RATE_WINDOW_S
configSG_PUSH_SWEEP_MAX_FILES
configSG_PUSH_SWEEP_MAX_RANGE
configSG_PUSH_SWEEP_REPORT_CAP
configSG_PUSH_SWEEP
configSECURITY_GUIDANCE_COMMIT_REVIEW
configSG_AGENTIC_NO_RACE
configSG_AGENTIC_RACE_DELAY_S
configCLAUDE_PROJECT_DIR
configCLAUDE_CODE_REMOTE_SESSION_ID
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/zaid-nizam-dotfiles-2ekub5)](https://m8ven.ai/mcp/zaid-nizam-dotfiles-2ekub5)
commit: 22a078683bff936725aff8392b50e5627e4c5be3
code hash: d8514e3e3190ce397e8cf660b0f9befdf3644ca1d6a21090a2eb040ade58656a
verified: 8/8/2026, 8:02:33 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client