Global Hack Map
by yorkeccak
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| CRON_SECRET | No | Authenticates the scheduled sweep and brief routes, including the Vercel cron jobs. | |
| NVD_API_KEY | No | Recommended: without it NVD allows 5 requests per 30s and the new-CVE feed falls back to CVE.org and CIRCL. | |
| GITHUB_TOKEN | No | Provides higher rate limits for the GitHub Advisory Database. | |
| CIRCL_API_KEY | No | Optional: CIRCL advertises 40 requests/minute with a key versus 20/minute anonymously. | |
| VALYU_API_KEY | No | Used for news extraction, the daily brief, generated answers, research reports and explainers. Without it the map still runs on public feeds. | |
| VALYU_APP_URL | No | Optional account-platform URL override; defaults to Valyu's hosted services. | |
| SESSION_SECRET | No | Signs the anonymous brief quota cookie in account mode; falls back to CRON_SECRET. | |
| VALYU_CLIENT_SECRET | No | OAuth client secret for optional account mode; not needed for default self-hosting. | |
| NEXT_PUBLIC_APP_MODE | No | Optional build-time switch: 'valyu' enables account mode; unset defaults to self-hosted mode. | self-hosted |
| NEXT_PUBLIC_SITE_URL | No | Absolute links in share cards and runbooks. | |
| UPSTASH_REDIS_REST_URL | No | Required in production for shared request limits and shared-key operation budgets. Vercel KV_REST_API_URL is supported automatically. | |
| NEXT_PUBLIC_MAPBOX_TOKEN | No | A public, URL-restricted Mapbox token used for the globe. | |
| NEXT_PUBLIC_REDIRECT_URI | No | OAuth redirect URI for optional account mode; not needed for default self-hosting. | |
| UPSTASH_REDIS_REST_TOKEN | No | Required in production for shared request limits and shared-key operation budgets. Vercel KV_REST_API_TOKEN is supported automatically. | |
| NEXT_PUBLIC_VALYU_AUTH_URL | No | Optional auth URL override; defaults to Valyu's hosted services. | |
| NEXT_PUBLIC_VALYU_CLIENT_ID | No | OAuth client setting for optional account mode; not needed for default self-hosting. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues