MCP.Market

MCP security checks — WARDEN and HISTOR MCP server

online · 96% uptime
by modelmarket.dev·dev.modelmarket/mcp-security·v1.0.0
No reviews yet

Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

A91/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed MCP security checks — WARDEN and HISTOR yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP security checks — WARDEN and HISTOR tools (4)

write = sends, deletes, buys or posts
  • histor_checkFree

    Look up an MCP server in HISTOR, a public append-only log of MCP tool sets: when its tool set was first pinned, how often it changed, and what the pattern scan found. HISTOR answers from its own observations and never contacts the server.

  • tool_list_costFree

    How many tokens an MCP server's tool list adds to every model request, what that costs per 1,000 requests, the heaviest tools, and where it sits among 18,204 packages and 16,170 remote servers. Send a tools/list or name a server HISTOR observes.

  • warden_scanFree

    Scan an MCP server's tools/list with WARDEN, the open-source MCP firewall: static rules and a threat list over every name, description, schema and annotation. Returns allow or block and each finding with its rule and severity. Quoted fragments of the scanned text are left out of the answer.

  • x402_checkFree

    Check a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's terms, and when the signature fails names the domain it was really made for (e.g. Base Sepolia's 'USDC' used on Base, where USDC is 'USD Coin').

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 373ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MCP security checks — WARDEN and HISTOR compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 90% of 918 Security servers
Tools
4
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
96%
of our recent checks; the typical remote Security server answers 100%
Response time
539 ms
faster than 20% of 550 Security servers

What its tools let an agent do: 4 read

Install MCP security checks — WARDEN and HISTOR in Claude Code, Cursor or VS Code

claude mcp add --transport http mcp-security https://modelmarket.dev/tools/mcp/security
Add to Cursor

What the publisher says

From the MCP security checks — WARDEN and HISTOR repository's README, as published. We do not edit it. Read it on GitHub

<!-- aicom-mirror-notice -->

🔄 Synced from a monorepo — but with a live history. warden mirrors the

canonical AI-Factory monorepo. History here is append-only (no force-push).

Pull requests are welcome — merged PRs are imported back into the monorepo

and re-synced here, so your contribution becomes canonical.

💬 Issues · Pull requests both welcome.

WARDEN — MCP server

<!-- final-ranking-witness --> Final ranking-feedback comparison, 26 October. On all five previously withheld contexts, old feedback repaired 6/40 continuations and explicit selected-versus-best feedback repaired 40/40. Valid controls stayed valid 20/20 per nominal arm. This completes the series on selected known failures, not a new holdout. The earlier offline-only statement is superseded for ranking feedback on this cohort; missing-set feedback efficacy remains unmeasured. <!-- /final-ranking-witness -->

<!-- mcp-name: io.github.alexar76/warden -->

<!-- aicom-readme-badges --> =20" /> <!-- /aicom-readme-badges -->

🌐 English · Русский · Español · Français · 中文 · Glossary

WARDEN quality cycle: MOMUS → AI-Factory → SKOPOS → shared node agent → deployment.

<!-- warden-try --> Check every MCP server on your machine. No account, no API key, no model. The only network traffic is to the servers in your config.

npx -y @aimarket/warden@0.22.1 scan
WARDEN scan 0.21.0 · ruleset 11 sha256-RDXs+TaQoehA… · block at high
  read .mcp.json (claude-code, 3 servers)

  ✓ allow   notes       claude-code    1 tool · score 0.90
  ✗ BLOCK   evil-notes  claude-code    1 tool · score 0.00 · TOOL_DEF_EXFIL(notes) TOOL_DEF_SECRET_REQUEST(notes) THREAT_SSH_KEY_READ(notes)
  ! error   broken      claude-code    could not start: spawn /nonexistent/bin/server ENOENT

3 servers: 1 allowed, 1 blocked, 1 not checked, 0 skipped.
Details: warden-mcp scan --json, or --markdown FILE. To review a changed server: warden-mcp scan --lock warden.lock.json --update-lock.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MCP security checks — WARDEN and HISTOR: common questions

Is MCP security checks — WARDEN and HISTOR MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the MCP security checks — WARDEN and HISTOR safety report
How do I install MCP security checks — WARDEN and HISTOR?
It runs remotely at modelmarket.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does MCP security checks — WARDEN and HISTOR need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MCP security checks — WARDEN and HISTOR maintained?
The last commit was 7 days ago (2026-10-26). The latest release is v1.0.0.
Is MCP security checks — WARDEN and HISTOR up?
96% of our last 26 checks got an answer. We check remote servers about four times a day.
What can I use instead of MCP security checks — WARDEN and HISTOR?
Servers from other publishers that do the same job: Jikida MCP server, Niubiz MCP server and MCPProxy MCP server.
How does MCP security checks — WARDEN and HISTOR compare with other Security MCP servers?
safety score 91/100 (higher than 90% of 918 Security servers); tools 4 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MCP security checks — WARDEN and HISTOR

Same job from other publishers: the closest match first, then the best rated.

  • Jikida
    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
    A
  • Niubiz
    MCP server for Niubiz — Peru card acquirer: security token, session, authorize, reverse
    More from codespar →
    B
  • MCPProxy
    Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
    B
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A
  • Prodcheck
    4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
    A

More from modelmarket.dev →