Odel

guardbee

12 entries

MCP server: One MCP server.
Audit Gap AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

OWASP MCP08 audit/telemetry gaps: missing tool-call logs, raw args in logs, disabled audit

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Context Oversharing AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
OAuth AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
OWASP ScanRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Prompt Injection ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Scans RAG content/scraped pages for indirect prompt injection

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Prompt Leak ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Catches leaked credentials and PII in outbound LLM prompts

7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Secret ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Scans files for leaked secrets and API keys

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Security ProxyRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Security SuiteRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

8% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Tool Poisoning ScannerRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Toxic Flow AuditorRun by its publisher: served from their own domain, namespace checked by the registry.
@guardbee · External

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.