C
Warning
74/100
7 days ago
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Code Verified⚡ Live Monitored: not connected
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
Zipstack
Source: github_code
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Code appears obfuscated
105 files are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 11 credentials: ANTHROPIC_API_KEY, HF_TOKEN, HUGGINGFACE_API_KEY, OLLAMA_API_KEY, OPENAI_API_KEY, ACTIONS_ID_TOKEN_REQUEST_TOKEN, LITELLM_CONFIG_BUCKET_OBJECT_KEY, REDIS_PASSWORD, LENGTH_OF_LITELLM_GENERATED_KEY, APORIO_API_KEY, QDRANT_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
🔐 secret
ANTHROPIC_API_KEY🔐 secret
HF_TOKEN🔐 secret
HUGGINGFACE_API_KEYconfig
DATABRICKS_API_BASE🔐 secret
OLLAMA_API_KEYconfig
OPENAI_BASE_URLconfig
OPENAI_API_BASEconfig
OPENAI_ORGANIZATION🔐 secret
OPENAI_API_KEYconfig
LITELLM_AZURE_REALTIME_PROTOCOLconfig
ACTIONS_ID_TOKEN_REQUEST_URL🔐 secret
ACTIONS_ID_TOKEN_REQUEST_TOKENconfig
AZURE_FEDERATED_TOKEN_FILEconfig
MCP_TOOL_PREFIX_SEPARATORconfig
DOCS_TITLEconfig
LITELLM_WORKER_STARTUP_HOOKSconfig
LITELLM_CONFIG_BUCKET_NAMEconfig
DOCS_FILTEREDconfig
LITELLM_NON_ROOTconfig
LITELLM_UI_PATHconfig
ROOT_REDIRECT_URLconfig
AZURE_KEY_VAULT_URI🔐 secret
LITELLM_CONFIG_BUCKET_OBJECT_KEYconfig
LITELLM_CONFIG_BUCKET_TYPEconfig
LITELLM_LICENSEconfig
GENERIC_CLIENT_USE_PKCEconfig
WORKER_CONFIGconfig
LITELLM_DONT_SHOW_FEEDBACK_BOXconfig
LITELLM_LOGconfig
PROMETHEUS_URLconfig
PYROSCOPE_APP_NAMEconfig
PYROSCOPE_SERVER_ADDRESSconfig
OTEL_ENVIRONMENT_NAMEconfig
PYROSCOPE_SAMPLE_RATEconfig
UI_USERNAMEconfig
UI_LOGO_PATHconfig
LITELLM_ASSETS_PATHconfig
LITELLM_FAVICON_URLconfig
SLACK_WEBHOOK_URLconfig
DOCS_DESCRIPTIONconfig
LITELLM_MODEconfig
LITELLM_DROP_PARAMSconfig
LITELLM_MODIFY_PARAMSconfig
LITELLM_USE_CHAT_COMPLETIONS_URL_FOR_ANTHROPIC_MESSAGESconfig
LITELLM_DISABLE_LAZY_LOADINGconfig
LITELLM_DISABLE_REDACT_SECRETSconfig
JSON_LOGSconfig
REDIS_SSLconfig
REDIS_USERNAME🔐 secret
REDIS_PASSWORDconfig
REDIS_HOSTconfig
REDIS_PORTconfig
LITELLM_LOCAL_ANTHROPIC_BETA_HEADERSconfig
DEFAULT_HEALTH_CHECK_PROMPTconfig
AZURE_DEFAULT_RESPONSES_API_VERSIONconfig
ROUTER_MAX_FALLBACKSconfig
DEFAULT_BATCH_SIZEconfig
DEFAULT_FLUSH_INTERVAL_SECONDSconfig
DEFAULT_S3_FLUSH_INTERVAL_SECONDSconfig
DEFAULT_S3_BATCH_SIZEconfig
DEFAULT_SQS_FLUSH_INTERVAL_SECONDSconfig
DEFAULT_NUM_WORKERS_LITELLM_PROXYconfig
DYNAMIC_RATE_LIMIT_ERROR_THRESHOLD_PER_MINUTEconfig
DEFAULT_SQS_BATCH_SIZEconfig
DEFAULT_MAX_RETRIESconfig
DEFAULT_MAX_RECURSE_DEPTHconfig
DEFAULT_MAX_RECURSE_DEPTH_SENSITIVE_DATA_MASKERconfig
DEFAULT_FAILURE_THRESHOLD_PERCENTconfig
DEFAULT_MAX_TOKENSconfig
DEFAULT_ALLOWED_FAILSconfig
DEFAULT_REDIS_SYNC_INTERVALconfig
DEFAULT_COOLDOWN_TIME_SECONDSconfig
DEFAULT_REPLICATE_POLLING_RETRIESconfig
DEFAULT_REPLICATE_POLLING_DELAY_SECONDSconfig
DEFAULT_IMAGE_TOKEN_COUNTconfig
LITELLM_MAX_STREAMING_DURATION_SECONDSconfig
MAX_BASE64_LENGTH_FOR_LOGGINGconfig
LITELLM_DETAILED_TIMINGconfig
MODEL_COST_MAP_MIN_MODEL_COUNTconfig
MODEL_COST_MAP_MAX_SHRINK_RATIOconfig
DEFAULT_IMAGE_WIDTHconfig
DEFAULT_IMAGE_HEIGHTconfig
MAX_IMAGE_URL_DOWNLOAD_SIZE_MBconfig
MAX_SIZE_PER_ITEM_IN_MEMORY_CACHE_IN_KBconfig
SINGLE_DEPLOYMENT_TRAFFIC_FAILURE_THRESHOLDconfig
DEFAULT_FAILURE_THRESHOLD_MINIMUM_REQUESTSconfig
DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGETconfig
DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODELconfig
DEFAULT_MCP_SEMANTIC_FILTER_TOP_Kconfig
DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLDconfig
MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTHconfig
DEFAULT_SEMANTIC_GUARD_EMBEDDING_MODELconfig
DEFAULT_SEMANTIC_GUARD_SIMILARITY_THRESHOLDconfig
MCP_OAUTH2_TOKEN_EXPIRY_BUFFER_SECONDSconfig
MCP_OAUTH2_TOKEN_CACHE_MAX_SIZEconfig
MCP_OAUTH2_TOKEN_CACHE_DEFAULT_TTLconfig
MCP_NPM_CACHE_DIRconfig
MCP_OAUTH2_TOKEN_CACHE_MIN_TTLconfig
LITELLM_MCP_CLIENT_TIMEOUTconfig
LITELLM_MCP_TOOL_LISTING_TIMEOUTconfig
LITELLM_MCP_METADATA_TIMEOUTconfig
LITELLM_MCP_HEALTH_CHECK_TIMEOUTconfig
DEFAULT_REASONING_EFFORT_MINIMAL_THINKING_BUDGET_GEMINI_2_5_FLASHconfig
DEFAULT_REASONING_EFFORT_MINIMAL_THINKING_BUDGET_GEMINI_2_5_PROconfig
DEFAULT_REASONING_EFFORT_MINIMAL_THINKING_BUDGETconfig
DEFAULT_REASONING_EFFORT_LOW_THINKING_BUDGETconfig
DEFAULT_REASONING_EFFORT_MEDIUM_THINKING_BUDGETconfig
DEFAULT_REASONING_EFFORT_HIGH_THINKING_BUDGETconfig
MAX_TOKEN_TRIMMING_ATTEMPTSconfig
RUNWAYML_DEFAULT_API_VERSIONconfig
RUNWAYML_POLLING_TIMEOUTconfig
AIOHTTP_CONNECTOR_LIMITconfig
AIOHTTP_CONNECTOR_LIMIT_PER_HOSTconfig
AIOHTTP_KEEPALIVE_TIMEOUTconfig
AIOHTTP_TTL_DNS_CACHEconfig
REALTIME_WEBSOCKET_MAX_MESSAGE_SIZE_BYTESconfig
MAX_REDIS_BUFFER_DEQUEUE_COUNTconfig
LITELLM_ASYNCIO_QUEUE_MAXSIZEconfig
TOOL_POLICY_CACHE_TTL_SECONDSconfig
MAX_SIZE_IN_MEMORY_QUEUEconfig
MAX_IN_MEMORY_QUEUE_FLUSH_COUNTconfig
MINIMUM_PROMPT_CACHE_TOKEN_COUNTconfig
DEFAULT_TRIM_RATIOconfig
HOURS_IN_A_DAYconfig
DAYS_IN_A_WEEKconfig
DAYS_IN_A_MONTHconfig
DAYS_IN_A_YEARconfig
REPLICATE_MODEL_NAME_WITH_ID_LENGTHconfig
FUNCTION_DEFINITION_TOKEN_COUNTconfig
SYSTEM_MESSAGE_TOKEN_COUNTconfig
TOOL_CHOICE_OBJECT_TOKEN_COUNTconfig
DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNTconfig
DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNTconfig
MAX_SHORT_SIDE_FOR_IMAGE_HIGH_RESconfig
MAX_LONG_SIDE_FOR_IMAGE_HIGH_RESconfig
MAX_TILE_WIDTHconfig
MAX_TILE_HEIGHTconfig
OPENAI_FILE_SEARCH_COST_PER_1K_CALLSconfig
AZURE_FILE_SEARCH_COST_PER_GB_PER_DAYconfig
MIN_NON_ZERO_TEMPERATUREconfig
REPEATED_STREAMING_CHUNK_LIMITconfig
DEFAULT_MAX_LRU_CACHE_SIZEconfig
INITIAL_RETRY_DELAYconfig
MAX_RETRY_DELAYconfig
JITTERconfig
DEFAULT_IN_MEMORY_TTLconfig
DEFAULT_MAX_REDIS_BATCH_CACHE_SIZEconfig
DEFAULT_POLLING_INTERVALconfig
AZURE_OPERATION_POLLING_TIMEOUTconfig
AZURE_DOCUMENT_INTELLIGENCE_API_VERSIONconfig
AZURE_DOCUMENT_INTELLIGENCE_DEFAULT_DPIconfig
REDIS_SOCKET_TIMEOUTconfig
REDIS_CONNECTION_POOL_TIMEOUTconfig
DEFAULT_REDIS_MAJOR_VERSIONconfig
NON_LLM_CONNECTION_TIMEOUTconfig
MAX_EXCEPTION_MESSAGE_LENGTHconfig
MAX_STRING_LENGTH_PROMPT_IN_DBconfig
BEDROCK_MAX_POLICY_SIZEconfig
BEDROCK_MIN_THINKING_BUDGET_TOKENSconfig
REPLICATE_POLLING_DELAY_SECONDSconfig
DEFAULT_ANTHROPIC_CHAT_MAX_TOKENSconfig
TOGETHER_AI_4_Bconfig
TOGETHER_AI_8_Bconfig
TOGETHER_AI_21_Bconfig
TOGETHER_AI_41_Bconfig
TOGETHER_AI_80_Bconfig
TOGETHER_AI_110_Bconfig
TOGETHER_AI_EMBEDDING_150_Mconfig
TOGETHER_AI_EMBEDDING_350_Mconfig
QDRANT_SCALAR_QUANTILEconfig
QDRANT_VECTOR_SIZEconfig
CACHED_STREAMING_CHUNK_DELAYconfig
AUDIO_SPEECH_CHUNK_SIZEconfig
DEFAULT_MAX_TOKENS_FOR_TRITONconfig
REQUEST_TIMEOUTconfig
DEFAULT_A2A_AGENT_TIMEOUTconfig
DEFAULT_REPLICATE_GPU_PRICE_PER_SECONDconfig
FIREWORKS_AI_56_B_MOEconfig
FIREWORKS_AI_176_B_MOEconfig
FIREWORKS_AI_4_Bconfig
FIREWORKS_AI_16_Bconfig
FIREWORKS_AI_80_Bconfig
MAX_LANGFUSE_INITIALIZED_CLIENTSconfig
LOGGING_WORKER_CONCURRENCYconfig
LOGGING_WORKER_MAX_QUEUE_SIZEconfig
LOGGING_WORKER_MAX_TIME_PER_COROUTINEconfig
LOGGING_WORKER_CLEAR_PERCENTAGEconfig
MAX_ITERATIONS_TO_CLEAR_QUEUEconfig
MAX_TIME_TO_CLEAR_QUEUEconfig
LOGGING_WORKER_AGGRESSIVE_CLEAR_COOLDOWN_SECONDSconfig
EMAIL_BUDGET_ALERT_TTLconfig
EMAIL_BUDGET_ALERT_MAX_SPEND_ALERT_PERCENTAGEconfig
DEFAULT_GOOGLE_VIDEO_DURATION_SECONDSconfig
DEFAULT_DATAFORSEO_LOCATION_CODEconfig
HUMANLOOP_PROMPT_CACHE_TTL_SECONDSconfig
PROMETHEUS_BUDGET_METRICS_REFRESH_INTERVAL_MINUTESconfig
CLOUDZERO_EXPORT_INTERVAL_MINUTESconfig
MAXIMUM_TRACEBACK_LINES_TO_LOGconfig
MAX_SPENDLOG_ROWS_TO_QUERYconfig
DEFAULT_SOFT_BUDGETconfig
PYTHON_GC_THRESHOLDconfig
BATCH_STATUS_POLL_INTERVAL_SECONDSconfig
BATCH_STATUS_POLL_MAX_ATTEMPTSconfig
HEALTH_CHECK_TIMEOUT_SECONDSconfig
LITELLM_KEY_ROTATION_ENABLEDconfig
LITELLM_KEY_ROTATION_CHECK_INTERVAL_SECONDSconfig
CLI_JWT_EXPIRATION_HOURSconfig
LITELLM_CLI_JWT_EXPIRATION_HOURSconfig
LITELLM_UI_SESSION_DURATIONconfig
CLOUDZERO_MAX_FETCHED_DATA_RECORDSconfig
SPEND_LOG_RUN_LOOPSconfig
SPEND_LOG_CLEANUP_BATCH_SIZEconfig
SPEND_LOG_QUEUE_SIZE_THRESHOLDconfig
SPEND_LOG_QUEUE_POLL_INTERVALconfig
DEFAULT_CRON_JOB_LOCK_TTL_SECONDSconfig
PROXY_BUDGET_RESCHEDULER_MIN_TIMEconfig
PROXY_BATCH_POLLING_INTERVALconfig
MAX_OBJECTS_PER_POLL_CYCLEconfig
MANAGED_OBJECT_STALENESS_CUTOFF_DAYSconfig
PROXY_BATCH_POLLING_ENABLEDconfig
PROXY_BUDGET_RESCHEDULER_MAX_TIMEconfig
PROXY_BATCH_WRITE_ATconfig
APSCHEDULER_COALESCEconfig
APSCHEDULER_MISFIRE_GRACE_TIMEconfig
APSCHEDULER_MAX_INSTANCESconfig
DEFAULT_HEALTH_CHECK_INTERVALconfig
DEFAULT_SHARED_HEALTH_CHECK_TTLconfig
DEFAULT_SHARED_HEALTH_CHECK_LOCK_TTLconfig
PROMETHEUS_FALLBACK_STATS_SEND_TIME_HOURSconfig
DEFAULT_MODEL_CREATED_AT_TIMEconfig
DEFAULT_SLACK_ALERTING_THRESHOLDconfig
MAX_TEAM_LIST_LIMITconfig
MAX_POLICY_ESTIMATE_IMPACT_ROWSconfig
DEFAULT_PROMPT_INJECTION_SIMILARITY_THRESHOLD🔐 secret
LENGTH_OF_LITELLM_GENERATED_KEYconfig
SECRET_MANAGER_REFRESH_INTERVALconfig
DEFAULT_MANAGEMENT_OBJECT_IN_MEMORY_CACHE_TTLconfig
DEFAULT_ACCESS_GROUP_CACHE_TTLconfig
COROUTINE_CHECKER_MAX_SIZE_IN_MEMORYconfig
DEFAULT_CHUNK_SIZEconfig
DEFAULT_CHUNK_OVERLAPconfig
S3_VECTORS_DEFAULT_DIMENSIONconfig
S3_VECTORS_DEFAULT_DISTANCE_METRICconfig
MICROSOFT_USER_EMAIL_ATTRIBUTEconfig
MICROSOFT_USER_DISPLAY_NAME_ATTRIBUTEconfig
MICROSOFT_USER_ID_ATTRIBUTEconfig
MICROSOFT_USER_FIRST_NAME_ATTRIBUTEconfig
MICROSOFT_USER_LAST_NAME_ATTRIBUTEconfig
MAX_PAYLOAD_SIZE_FOR_DEBUG_LOGconfig
MAX_COMPETITOR_NAMESconfig
COMPETITOR_LLM_TEMPERATUREconfig
AZURE_API_VERSIONconfig
NO_PROXY🔐 secret
APORIO_API_KEYconfig
APORIO_API_BASEconfig
QDRANT_URLconfig
QDRANT_API_BASE🔐 secret
QDRANT_API_KEYDeployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deploy
REDIS_URL// quality suggestions
Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
2/2 tools missing one or more hints — mcp_server_tool_call (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); listmcptoolsrestapiresponseobject (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint). OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
Only 0/2 tools referenced in tests (0%)
Write tests that reference each tool by name so every tool has at least one test.
Readable source code
105 files are minified or bundled, which is usually build output rather than concealment
Ship unminified, readable source.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/zipstack/litellm)Shows verification status without the grade. Want the grade badge instead? Remove
?variant=verified from the URL.commit: 809ba8ce35f1c763eb28717a82f1079b5c8f151d
code hash: 9b6d6ed49ab1c3c853d2fbb9fd7b1e9548a8110004e534ec3015d7a043e691d6
verified: 9/3/2026, 6:29:10 PM
Check MCPs from inside your assistant
Tool Check · MCPVetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-checkcheck_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client