mazzap
Mazzap, part of the Mazzstack: essentials for the Singularity Slowlife
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
zymazza
Source: github_topic
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
CHAT_PROVIDERHOSTOLLAMA_HOSTOLLAMA_MAX_TOOL_ROUNDSOLLAMA_MODELOLLAMA_NUM_CTXOLLAMA_TEMPERATUREOPENAI_API_KEY(env var or a .env file) — see the chat section below. For anOPENAI_MAX_TOOL_ROUNDSOPENAI_MODELOPENAI_REASONING_EFFORTOPENAI_REQUIRE_USER_KEY1. Hosted mode scopes /data, chat/MCP tools,TWIN_DATA_DIRmany twins — point --data-dir / at a folder and your otherVEIL_ALLOWED_HOSTSstop DNS rebinding; on any exposed deployment setVEIL_COOKIE_SECUREVEIL_FIRE_PYTHONVEIL_HOSTEDtheir own OpenAI key, run with =1 andVEIL_HOSTED_ROOTVEIL_HOSTED_TEMPLATE_DATA_DIRVEIL_HYDRO_PYTHONVEIL_INITVEIL_LAYER_UPLOAD_MAX_BYTESVEIL_LIVE_BRIDGE_RETRY_BASE_MSVEIL_LIVE_BRIDGE_RETRY_MAX_MSVEIL_LIVE_DB_APPEND_QUEUE_MAXVEIL_LIVE_DB_APPEND_TIMEOUT_MSVEIL_LIVE_GATEWAY_AUTOSTARTVEIL_LIVE_POSITION_ACTIVE_MSVEIL_LIVE_POSITION_STALE_MSVEIL_LIVE_PYTHONVEIL_LIVE_TOKENspawn local processes. Unless you set a .live_token (or ),VEIL_MCP_PYTHONVEIL_SELF_URLVEIL_SESSION_SECRETVEIL_NATIONAL_LAYER_MAX_FEATURESVEIL_NATIONAL_BIG_DOWNLOAD_MAX_BYTESVEIL_NATIONAL_BIG_DOWNLOAD_MIN_FREE_BYTESVEIL_NATIONAL_LIGHT_DOWNLOAD_MAX_BYTESVEIL_NATIONAL_LARGE_DOWNLOAD_BYTESVEIL_FETCH_RETRIESTWIN_PACKPacks load via scripts/twin_pack.py (chosen by , elseVEIL_LIVE_POSITION_ACTIVE_SECONDSVEIL_LIVE_POSITION_STALE_SECONDSVEIL_LIVE_DB_BUSY_TIMEOUT_MSVEIL_URLVEIL_GBIF_RICHNESS_REFRESHVEIL_GBIF_RICHNESS_GRIDVEIL_GBIF_RICHNESS_FACET_LIMITVEIL_GBIF_RICHNESS_FACET_PAGESVEIL_GBIF_RICHNESS_DELAYVEIL_GBIF_ZOOMVEIL_ART17_REFRESHVEIL_DISABLE_META_CHMVEIL_SENTINEL2_DATETIMEVEIL_META_CHM_CACHEPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
66/66 tools missing one or more hints — describe_place (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); describe_twin (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); find_entities (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +63 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
42/66 tools referenced in tests (64%)
Write tests that reference each tool by name so every tool has at least one test.
Readable source code
2 files are minified or bundled, which is usually build output rather than concealment
Ship unminified, readable source.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/zymazza/mazzap)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check