{"name":"io.github.GuardBee/mcp-server-auditor","slug":"guardbee-mcp-server-auditor","title":null,"description":"Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets","url":"https://mcp.market/server/guardbee-mcp-server-auditor","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":27,"stars":1,"forks":1,"downloads_week":73,"last_push_at":"2026-10-09T18:52:43.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/GuardBee/guardbee-mcp","website":null,"version":"0.1.8","remotes":[],"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-server-auditor","version":"0.1.8","transport":{"type":"stdio"}}],"tools":[{"name":"list_patterns","description":"List all MCP server security patterns that the auditor can detect, grouped by category","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_directory","description":"Recursively scan an MCP server's codebase for insecure tool-definition patterns. Automatically skips node_modules, .git, dist, and binary files.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_file","description":"Scan a single file for insecure MCP server/tool-definition patterns","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_text","description":"Scan a text string or code snippet for insecure MCP server/tool-definition patterns (excessive-agency tool names, shell/eval/SQL/SSRF sinks fed by raw tool input, overly permissive schemas, hardcoded secrets, wildcard CORS).","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-10-09T18:54:07.778Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-09T18:54:07.746Z","components":{"code":{"score":20,"max":25,"notes":["15 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/patterns.js: …o a remote code execution vector. Never eval() input; parse and validate it as data i…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-server-auditor","version":"0.1.8","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-10-09T18:19:39.012Z","repositoryUrl":"https://github.com/GuardBee/guardbee-mcp.git","weeklyDownloads":73}],"repo":{"found":true,"owner":"GuardBee","repo":"guardbee-mcp","archived":false,"pushedAt":"2026-10-09T18:52:43Z","stars":1,"forks":1,"openIssues":1,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/296794741?v=4","ownerCreatedAt":"2026-06-25T07:13:41Z"},"icon":{"url":"https://avatars.githubusercontent.com/u/296794741?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":1,"downloadsWeek":73,"license":"MIT","lastPushAt":"2026-10-09T18:52:43.000Z","score":27}}}},"grade_history":[],"reviews":[]}