io.github.4hmetuyar/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Source

Official Registry

Updated

2026-09-28

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Running security audit…

Credentials
Network egress
Code execution
Data access
Supply chain

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.4hmetuyar/mcp-server-auditor" MCP server from askskill:
Run: claude mcp add 'io-github-4hmetuyar-mcp-server-auditor' -- npx -y @guardbee/mcp-server-auditor

// docs

No documentation provided

Check the source repo for usage and examples.

Go to source repo ↗

// from the same source

MCP

io.github.4hmetuyar/secret-scanner

Scans files for leaked secrets and API keys

—Get→

MCP

io.github.4hmetuyar/security-proxy

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

—Get→

MCP

io.github.4hmetuyar/toxic-flow-auditor

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

—Get→

MCP

io.github.4hmetuyar/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

—Get→

MCP

io.github.4hmetuyar/agent-graph-auditor

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

—Get→

MCP

io.github.4hmetuyar/prompt-leak-scanner

Catches leaked credentials and PII in outbound LLM prompts

—Get→

$ loading_