{"name":"io.github.Tyox-all/mund","slug":"tyox-all-mund","title":"Mund — MCP Security Scanner","description":"Scan for prompt injection, secrets, PII, and vet MCP servers before installation","url":"https://mcp.market/server/tyox-all-mund","rating":null,"grade":"A","score":88,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":10,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-08-24T15:08:53.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Tyox-all/Weave_Protocol","website":null,"version":"0.1.12","remotes":[],"packages":[{"registryType":"npm","identifier":"@weave_protocol/mund","version":"0.1.12","transport":{"type":"stdio"}}],"tools":[{"name":"mund_acknowledge_alert","description":"Mark a security event/alert as acknowledged. Args: - event_id (string): ID of the event to acknowledge - acknowledged_by (string): Optional name/ID of acknowledger Returns: Confirmation of acknowledgment","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_add_rule","description":"Add a custom security detection rule. Create custom rules to detect specific patterns in content. Rules use regular expressions for pattern matching and can be configured with different severity levels and actions. Args: - id (string): Unique rule identifier (lowercase, alphanumeric, underscores) - name (string): Human-readable rule name - description (string): Optional description - type: Detecti","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_allowlist_pattern","description":"Add a pattern to the allowlist. Allowlisted patterns will be ignored by detection rules. Args: - pattern (string): Pattern to allowlist - type: Type of pattern Returns: Confirmation of allowlist addition","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_audit_mcp_permissions","description":"Analyze the permission scope and capabilities of an MCP server's tools. Identifies network access, filesystem operations, command execution, and other potentially dangerous capabilities.","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_block_pattern","description":"Add a pattern to the blocklist. Blocked patterns will always be flagged regardless of other rules. Args: - pattern (string): Pattern to block - type: Type of pattern (secret, pii, code_pattern, injection, exfiltration) Returns: Confirmation of blocklist addition","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_check_typosquatting","description":"Check if an MCP server name is potentially typosquatting a known legitimate server. Compares against a list of official and common MCP servers.","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_check_url","description":"Check if a URL is safe to access. Validates URLs against known dangerous patterns including: - Data exfiltration services (webhook.site, requestbin, etc.) - IP-based URLs (often used to bypass domain filtering) - Suspicious TLDs (.tk, .ml, etc.) - Data URLs (can contain arbitrary content) Args: - url (string): The URL to check (required) - tool_name (string): Name of tool attempting access (option","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_configure_notification","description":"Configure a notification channel for security alerts. Note: Full configuration requires environment variables. This tool can update webhook URLs and minimum severity settings at runtime. Args: - type: Channel type (slack, teams, email, webhook) - webhook_url: Webhook URL (for slack, teams, webhook) - min_severity: Minimum severity to notify Returns: Confirmation of configuration","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_get_events","description":"Retrieve recent security events from the Mund monitoring system. Supports filtering and pagination for efficient event retrieval. Args: - limit (number): Maximum events to return, 1-1000 (default: 50) - offset (number): Skip this many events for pagination (default: 0) - severity ('critical' | 'high' | 'medium' | 'low' | 'info'): Filter by severity - type: Filter by detection type - acknowledged (","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_get_status","description":"Get the current status of the Mund monitoring system. Returns information about: - Active analyzers and their status - Number of rules loaded - Configured notification channels - Block mode status - Recent event statistics","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_list_rules","description":"List all configured detection rules. Args: - type: Optional filter by detection type - enabled_only: Only show enabled rules (default: false) Returns: Array of rule configurations","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_remove_rule","description":"Remove a custom detection rule by ID. Note: Built-in rules cannot be removed, only disabled. Args: - id (string): ID of the rule to remove Returns: Confirmation of rule removal","write_action":true,"price_micros":0,"input_schema":null},{"name":"mund_scan_content","description":"","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_scan_mcp_server","description":"Scan an MCP server manifest (server.json) for security issues before installation. Detects prompt injection in tool descriptions, typosquatting, embedded secrets, and dangerous permissions.","write_action":false,"price_micros":0,"input_schema":null},{"name":"mund_validate_command","description":"Validate a shell command for safety before execution. Checks for dangerous patterns including: - Destructive commands (rm -rf, format, etc.) - Privilege escalation (sudo, chmod 777, etc.) - Network exfiltration (curl to suspicious URLs, etc.) - Code injection (eval, exec with variables, etc.) Args: - command (string): Shell command to validate (required) - tool_name (string): Name of tool executin","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":88,"grade":"A","scanned_at":"2026-09-27T23:38:18.122Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-09-27T23:38:18.048Z","components":{"code":{"score":25,"max":25,"notes":["66 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 34 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@weave_protocol/mund","version":"0.1.12","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":8,"publishedAt":"2026-03-09T19:00:54.982Z","repositoryUrl":"git+https://github.com/Tyox-all/Weave_Protocol.git"}],"repo":{"found":true,"owner":"Tyox-all","repo":"Weave_Protocol","archived":false,"pushedAt":"2026-08-24T15:08:53Z","stars":0,"forks":0,"openIssues":43,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/65611231?v=4","ownerCreatedAt":"2020-05-19T14:48:01Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/65611231?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-08-24T15:08:53.000Z","score":10}}}},"grade_history":[],"reviews":[]}