Atlas / MCP servers / evilsocket / Nerve

NerveBLOCK

mcp/evilsocket/nerve

The Simple Agent Development Kit.

Verdict
BLOCK
Grade
D
Trust score
63 /100
Exposed tools
6 6r · 0w · 0d
Transport
stdio · streamable-http
License
NOASSERTION
Stars
1,316
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The Simple Agent Development Kit

[](https://github.com/evilsocket/nerve/blob/main/docs/index.md) [](https://github.com/evilsocket/nerve/releases/latest) [](https://pypi.org/project/nerve-adk) [](https://hub.docker.com/r/evilsocket/nerve) [](https://github.com/evilsocket/nerve/actions/workflows/ci.yml) [](https://github.com/evilsocket/nerve/blob/master/LICENSE.md)

Join the project community on our server!

Nerve is a simple yet powerful Agent Development Kit (ADK) to build, run, evaluate, and orchestrate LLM-based agents using just YAML and a CLI. It’s designed for technical users who want programmable, auditable, and reproducible automation using large language models.

Key Features

📝 Declarative Agents

Defi

Read from source at commit f3dbe779d24bOBSERVED · 2026-09-24
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add nerve-adk -- uvx nerve-adk
claude-desktop
{
  "mcpServers": {
    "nerve-adk": {
      "command": "uvx",
      "args": [
        "nerve-adk"
      ]
    }
  }
}
03

Exposed tools (6)

6 read · 0 write · 0 destructive.

ToolRiskDescription
calculatereadA function that performs a calculation
get_weatherreadGet the current weather in a given place.
hello_worldreadA simple hello world function
process_datareadA function that processes complex data structures
test_state_toolreadA tool to test default string handling.
tool_namereadA test tool
04

Trust audit

BLOCKgrade D · trust 63/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (4 observation(s))
Shell
declared (8 observation(s))
Dependencies
pinned
Secrets in source
none-found

Findings (14)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
nerve/tools/compiler.py:152
exec(func_body, func_namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
nerve/tools/mcp/compiler.py:136
exec(func_body, type_defs)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
nerve/tools/namespaces/anytool.py:43
exec(code, func_namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
nerve/cli/create.py:59
module = __import__(f"nerve.tools.namespaces.{modname}", fromlist=[""])
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
nerve/cli/namespaces.py:26
module = __import__(f"nerve.tools.namespaces.{modname}", fromlist=[""])
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
nerve/tools/compiler.py:75
module = __import__(f"nerve.tools.namespaces.{namespace}", fromlist=[""])
LOWInventory / provenance · inv.hidden_file · CWE-1104
.pre-commit-config.yaml
.pre-commit-config.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
docs/assets/make_ns.py:19
module = __import__(f"nerve.tools.namespaces.{modname}", fromlist=[""])
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
examples/adk/single_step_with_tools.py:18
expected_result = eval(expression)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/index.md:188
nerve run -g "ollama/llama3.2?api_base=http://1.2.3.4:11434" agent
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
examples/bettercap-agent/agent.yml:17
api_base: http://127.0.0.1:8081
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
README.md:13
![Human Coded](https://img.shields.io/badge/human-coded-brightgreen?logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIyNCIgaGVpZ2h0PSIyNCIgdmlld0JveD0iMCAwI
INFOInventory / provenance · inv.oversize · CWE-1104
docs/assets/logo.psd
docs/assets/logo.psd
Why it matters. 4745622 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
docs/assets/logo_square.psd
docs/assets/logo_square.psd
Why it matters. 4481545 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-09-24 · audit v0.4.1 · source sha f3dbe779d24bfull audit observations/trust-audit/mcp-server/evilsocket__nerve.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-24f3dbe779d24bBLOCKD63first audit
06

Questions

What is the Nerve MCP server?

The Simple Agent Development Kit.

What tools does Nerve expose?

6 in total: 6 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Nerve safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (63/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Nerve need?

No credential environment variables were found in its source, so it appears to need none.

How does Nerve run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as nerve-adk.

How current is this page?

The grade is for one exact copy of the source (f3dbe779d24b), read on 2026-09-24. The repository is watched and re-audited when it changes.

Advertisement