Mmcp.market

Rug Pull Detector MCP server

by 4hmetuyar·io.github.4hmetuyar/rug-pull-detector·v0.2.1·1 stars
No reviews yet

Baselines an MCP server's tools and detects tool-definition changes after approval

A86/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A86/100

full report

Adoption
Growing

1 stars531 downloads/wk

Reviews

Write one

Nobody has reviewed Rug Pull Detector yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Rug Pull Detector tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • baseline_server

    Connect to an MCP server (stdio command or Streamable HTTP URL), read its current tools/list response, and store it as the trusted baseline for future drift checks. Call this once, right after you've reviewed and approved a server's tools.

  • check_server

    Connect to an MCP server and compare its current tools/list response against the stored baseline. A tool whose description, schema, or annotations changed since baseline is a 'rug pull' — approved once, silently different now. If no baseline exists yet, one is captured automatically (set autoBaseline=false to require an explicit baseline_server call first).

  • list_baselines

    List every server this scanner has a stored baseline for

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan21 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10
Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Rug Pull Detector in Claude Code, Cursor or VS Code

Runs npx -y @guardbee/mcp-rug-pull-detector on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add rug-pull-detector -- npx -y @guardbee/mcp-rug-pull-detector
Add to Cursor

What the publisher says

From the Rug Pull Detector repository's README, as published. We do not edit it. Read it on GitHub

guardbee-mcp

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文

guardbee.ai — AI Security Copilot for websites.

GuardBee's family of MCP (Model Context Protocol) servers — a single monorepo, independent npm packages.

Packages

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Rug Pull Detector: common questions

Is Rug Pull Detector MCP server safe?
Yes, by our scan: it is graded A (86/100). Read the Rug Pull Detector safety report
How do I install Rug Pull Detector?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Rug Pull Detector need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Rug Pull Detector maintained?
The last commit was 12 days ago (2026-10-01). The latest release is v0.2.1.

More from 4hmetuyar →