RheoBLOCK
Sovereign local-first AI voice studio. Neural speech synthesis, zero-shot voice cloning, zero-latency dictation, and MCP agent voice I/O. Built with Tauri & FastAPI.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Rheo
Sovereign Local-First AI Voice Studio & Neural Speech Engine Zero-shot neural voice cloning, multi-engine speech synthesis, system-wide zero-latency dictation, and Model Context Protocol (MCP) voice integration. 100% private, offline-capable, and running directly on your own hardware.
Origin • Overview • Capabilities • Engines • Quickstart •
2085cdf1be19OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add web --env HF_TOKEN=${HF_TOKEN} --env RHEO_API_KEY=${RHEO_API_KEY} -- npx -y @rheo/[email protected]{
"mcpServers": {
"web": {
"command": "npx",
"args": [
"-y",
"@rheo/[email protected]"
],
"env": {
"HF_TOKEN": "${HF_TOKEN}",
"RHEO_API_KEY": "${RHEO_API_KEY}"
}
}
}
}Exposed tools (5)
5 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Fireship | read | Rapid-fire, deadpan tech humor with zero filler |
Jarvis | read | Dry, composed |
Morgan | read | Warm, measured |
Scarlett | read | Bright, conversational |
Zendaya | read | Relaxed, modern delivery with effortless cool |
Trust audit
BLOCKgrade F · trust 39/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (9 observation(s))
- Network
- declared (16 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
exec(compile(patched, filename, "exec"), module.__dict__)
exec(bytecode, module.__dict__)
---
marimba_start.wav
marimba_stop.wav
pop_start.wav
pop_stop.wav
fireship.webm
py_module = importlib.import_module(py_package_name)
{/* Live Engine Beacon */}def start_login(callback_url: str, device_name: str) -> str:
params = urlencode({"redirect_uri": callback_url, "state": state, "name": device_name})<Input placeholder="http://127.0.0.1:17493" {...field} /><Input placeholder="http://127.0.0.1:17493" {...field} />const fallback = 'http://127.0.0.1:17493';
"http://127.0.0.1:5173",
"http://127.0.0.1:17493",
import { useEffect, useState } from 'react';.biomeignore
.bumpversion.cfg
combination_hash = hashlib.md5(sample_ids_str.encode()).hexdigest()[:12]
return hashlib.md5(combined).hexdigest()
import { version } from '../../package.json';import { cn } from '../../lib/cn';import { cn } from '../../lib/cn';Gates applied: no_behavioural_pass.
2085cdf1be19full audit observations/trust-audit/mcp-server/masterz1311__rheo.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 2085cdf1be19 | BLOCK | F | 39 | first audit |
Questions
What is the Rheo MCP server?
Sovereign local-first AI voice studio. Neural speech synthesis, zero-shot voice cloning, zero-latency dictation, and MCP agent voice I/O. Built with Tauri & FastAPI.
What tools does Rheo expose?
5 in total: 5 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Rheo safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (39/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Rheo need?
It reads HF_TOKEN and RHEO_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Rheo run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @rheo/web at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (2085cdf1be19), read on 2026-10-11. The repository is watched and re-audited when it changes.