grade C

3 days ago

glama

zkproofport-ai

Zero-knowledge proof generation MCP server. AI agents can prove identity claims (Coinbase KYC, Country, Google OIDC, Google Workspace, Microsoft 365) without revealing personal data. Runs in AWS Nitro Enclave TEE with x402 USDC payments.

→ zkproofport/proofport-ai · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 1 critical, 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

⚠️

Tests do not pass

Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.

🔐

You'll be asked for 10 credentials: ATTESTATION_KEY, CDP_API_KEY_SECRET, CDP_WALLET_SECRET, E2E_ATTESTATION_WALLET_KEY, E2E_PAYER_WALLET_KEY, GEMINI_API_KEY, OPENAI_API_KEY, PAYMENT_KEY, PROVER_PRIVATE_KEY, TELEGRAM_BOT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configA2A_BASE_URL— Public-facing service URL (for Agent Card)

configAGENT_TOKEN_ID

configAGENT_TOKEN_ID_ETHEREUM

configAGENT_VERSION— 1.0.0 Agent version string

🔐 secretATTESTATION_KEY

configBASE_RPC_URL— Base chain RPC endpoint

configBB_PATH— bb Barretenberg CLI path

configCDP_API_KEY_ID

🔐 secretCDP_API_KEY_SECRET

configCDP_WALLET_ADDRESS

🔐 secretCDP_WALLET_SECRET

configCHAIN_RPC_URL— RPC for proof verification

configCHAT_API_URL

configDEPLOY_ENV

🔐 secretE2E_ATTESTATION_WALLET_KEY

configE2E_BASE_URL

configE2E_OIDC_JWT

🔐 secretE2E_PAYER_WALLET_KEY

configEAS_GRAPHQL_ENDPOINT— EAS GraphQL endpoint for attestation queries

configENCLAVE_BRIDGE_PORT

configENCLAVE_CID— Nitro Enclave CID (required when TEE_MODE=nitro)

configENCLAVE_PORT— 5000 Nitro Enclave port

configERC8004_IDENTITY_ADDRESS— ERC-8004 Identity contract

configERC8004_REPUTATION_ADDRESS— ERC-8004 Reputation contract

configERC8004_VALIDATION_ADDRESS

configETHEREUM_RPC_URL

🔐 secretGEMINI_API_KEY— Gemini API key for chat

configLOG_LEVEL

🔐 secretOPENAI_API_KEY— OpenAI API key for chat

🔐 secretPAYMENT_KEY

configPAYMENT_MODE— disabled / testnet / mainnet

configPAYMENT_PAY_TO— Operator wallet (required when payment enabled)

configPAYMENT_PROOF_PRICE— $0.10 Price per proof (USD)

configPHOENIX_COLLECTOR_ENDPOINT— Phoenix OTLP endpoint for tracing

configPORT— 4002 Express server port

configPROOFPORT_URL

🔐 secretPROVER_PRIVATE_KEY— Agent wallet private key (64 hex chars, no 0x)

configPROVER_URL

configREDIS_URL— Redis connection string

configSCOPE

configSERVER_URL

configTEE_ATTESTATION— false Enable attestation verification

configTEE_MODE— disabled disabled / nitro

🔐 secretTELEGRAM_BOT_TOKEN

configVIRTUALS_AGENT_WALLET

configVIRTUALS_ENABLED

configVIRTUALS_ENTITY_ID

configVIRTUALS_WALLET_PK

configWEBSITE_URL

configX402_FACILITATOR_URL

configZKPROOFPORT_SILENT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/zkproofport-proofport-ai-1ykzje)](https://m8ven.ai/mcp/zkproofport-proofport-ai-1ykzje)

commit: 5103bfc164dc95384f28f1f6a74c3cd699034e3d

code hash: 240c35ad598a7e57fac6ba6f6740961ac0c61170e14aaa63012fa12f1452a49f

verified: 4/18/2026, 6:16:53 PM

view raw JSON →