Is Hayward MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highcurl | sh in a script
How Hayward compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 63/100
- higher than 19% of 4,460 AI and agents servers
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
What its tools let an agent do: 1 read
Public scan report
scanner v0.1.10 · 2026-10-24 · same rubric, same numbers if you re-run it
1 high1 medium
- Code scan25 source files scanned8/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (2)
- highcurl | sh in a script
install.curl-pipehayward-1.4.1/hayward/_pickle_engine.py: …oncrete args) -- e.g. resolving `os.system('curl ... | sh')` instead of just noting that `os.… - mediumeval / new Function used
exec.evalhayward-1.4.1/hayward/_pickle_engine.py: …"os.system", b"subprocess", b"exec(", b"eval(", b"__import__", b"posix\nsystem", …
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Hayward does
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedWidely usedB
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
VisualTorchRender PyTorch architecture diagrams and animated GIF reveals from trusted model source.not reviewedEstablishedA
