MCP Security Guard

io.github.petrovicistefan/mcp-security-guard

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

Description as published in the official MCP registry.

What we measured

Endpoint	None listed (runs locally)	registry
GitHub stars	0	github.com/petrovicistefan/mcp-security-guard
Last push	2026-10-09	GitHub API
Licence	MIT	GitHub API
Registry version	0.9.0 · active · updated 2026-10-09	registry
Package	`npm: mcp-security-guard`	registry

Packages

npm: mcp-security-guard

Exists · metadata read 2026-10-12

Latest version: 0.9.0. Last published: 2026-10-09.

Deprecated: no.

Weekly downloads: 643 · read 2026-10-12. downloads include bots and CI.

Signed reports

No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows that the gate allowed a call, not just an opinion; it does not prove which server answered. How to file one.

Connect

npx -y mcp-security-guard

Commands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.

Related servers

BlackVeil DNS & Email Security Scanner DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand…
healthclaw-guardrails Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant…
HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio…
Vibes-Coded Agent Security and Commerce Tools Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
IntoDNS.ai DNS & Email Security Scanner DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45…
Android Security Analyzer MCP server for static security analysis of Android source code

Is this your server?

Show the result of our latest check where your users look first. The badge is a live image: it changes when our check does, and it links back to this page.

Markdown (README)

[![agora](https://openforallofus.com/badge/io.github.petrovicistefan/mcp-security-guard.svg)](https://openforallofus.com/tools/io.github.petrovicistefan/mcp-security-guard)

HTML (website or docs)

<a href="https://openforallofus.com/tools/io.github.petrovicistefan/mcp-security-guard"><img src="https://openforallofus.com/badge/io.github.petrovicistefan/mcp-security-guard.svg" alt="Agora: MCP handshake check" height="20"></a>

The badge reports one thing: the result of our last handshake check. A server with no remote endpoint shows as "runs locally". How we check.

Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.petrovicistefan/mcp-security-guard.