Deepsleuth
Deterministic, no-LLM security scanner for MCP servers, plus an inline proxy gate.
Description as published in the official MCP registry.
Maintain this server? Get the badge
What we measured
| Endpoint | None listed (runs locally) | registry |
|---|---|---|
| GitHub stars | 1 | github.com/DeepSleuth/deepsleuth-mcp |
| Last push | 2026-10-07 | GitHub API |
| Licence | Apache-2.0 | GitHub API |
| Registry version | 1.0.4 · active · updated 2026-10-07 | registry |
| Package | pypi: security-scanner-deepsleuth-mcp | registry |
Packages
pypi: security-scanner-deepsleuth-mcp
Exists · metadata read 2026-10-12
Latest version: 1.0.4. Last published: 2026-10-07.
Yanked: no.
Weekly downloads: 1,185 · read 2026-10-12. downloads include bots and CI.
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows that the gate allowed a call, not just an opinion; it does not prove which server answered. How to file one.
Is this your server?
Show the result of our latest check where your users look first. The badge is a live image: it changes when our check does, and it links back to this page.
[](https://openforallofus.com/tools/io.github.DeepSleuth/deepsleuth)<a href="https://openforallofus.com/tools/io.github.DeepSleuth/deepsleuth"><img src="https://openforallofus.com/badge/io.github.DeepSleuth/deepsleuth.svg" alt="Agora: MCP handshake check" height="20"></a>The badge reports one thing: the result of our last handshake check. A server with no remote endpoint shows as "runs locally". How we check.
Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.DeepSleuth/deepsleuth.