MCP.Market

FabTally Guard MCP server

online · 100% uptime
by zvmzaretsky·io.github.zvmzaretsky/fabtally-guard·v1.0.0
No reviews yet

Verify before you act: deps-check, x402-preflight, json-repair & url-read for agents.

A87/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A87/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed FabTally Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

FabTally Guard tools (4)

write = sends, deletes, buys or posts
  • deps_checkFree

    PAID $0.003 (x402, USDC on Base). Vet a software package BEFORE installing it. Returns existence, latest-vs-requested, deprecation/yank markers, known CVEs from OSV.dev, typosquat similarity to popular names, SPDX license, and age/download signals with a plain-English risk verdict. Args: ecosystem (npm|pypi|crates), name, version (optional). Without payment returns the x402 challenge; pass x_payment to settle.

  • json_repairFree

    PAID $0.002 (x402, USDC on Base). Coerce near-miss LLM JSON to a JSON-Schema-conformant object: strip code fences/prose, fix trailing commas/quotes/unquoted keys, normalise Python literals, balance brackets, then coerce types, apply defaults, and drop extraneous keys. Returns the repaired object OR precise per-field errors. Args: json (the raw string), schema (a JSON Schema object). Without payment returns the x402 challenge.

  • url_readFree

    PAID $0.004 (x402, USDC on Base). Fetch a PUBLIC url and return clean Markdown + a token estimate for RAG ingestion — readability extraction, boilerplate stripped. Respects robots.txt, public pages only, no login/paywall bypass, nothing stored. Args: url. Without payment returns the x402 challenge; pass x_payment to settle.

  • x402_preflightFree

    PAID $0.002 (x402, USDC on Base). Verify another x402 endpoint BEFORE paying it: does an unpaid call return a valid x402 v2 402 challenge? do the quoted amount/asset/network/payTo match the site's /.well-known/x402? is TLS valid, host reachable, openapi present? Returns pass/fail + per-check reasons + the parsed price you would pay. Args: url. Without payment returns the x402 challenge; pass x_payment to settle.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 989ms20/20
  • Tool poisoning4 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 54 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How FabTally Guard compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
87/100
higher than 73% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
376 ms
faster than 39% of 30,031 servers

What its tools let an agent do: 4 read

Install FabTally Guard in Claude Code, Cursor or VS Code

claude mcp add --transport http fabtally-guard https://guard.fabtally.com/mcp
Add to Cursor

What the publisher says

From the FabTally Guard repository's README, as published. We do not edit it. Read it on GitHub

FabTally Guard — MCP server

De-risk-a-dollar verification checks an AI agent runs before a costly action. Fronts the Guard HTTP API at https://guard.fabtally.com. Holds no private key.

Tools (all paid; a call with no payment returns the decoded x402 402 challenge)

Every tool also accepts an optional x_payment (base64 x402 payload) that is forwarded as the X-PAYMENT header to settle the call and return the real result. Humans can instead prepay by card and use an X-FabTally-Key credit key against the HTTP API.

Transports

  • stdio (portable): npx fabtally-guard-mcp (bin: fabtally-guard-mcp)
  • streamable-http (hosted): https://guard.fabtally.com/mcp

Config: FABTALLYGUARDBASE (default https://guard.fabtally.com).

Read-only, keyless, stateless, descriptive. Operated by Sunstone Soft (fabtally.com). Not a security guarantee.

Nothing above is checked by us. What we check is on the safety report.

FabTally Guard: common questions

Is FabTally Guard MCP server safe?
Yes, by our scan: it is graded A (87/100). Read the FabTally Guard safety report
How do I install FabTally Guard?
It runs remotely at guard.fabtally.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does FabTally Guard need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is FabTally Guard maintained?
The last commit was 95 days ago (2026-08-01). The latest release is v1.0.0.
Is FabTally Guard up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of FabTally Guard?
Servers from other publishers that do the same job: Reticle MCP server.
How does FabTally Guard compare with other MCP servers?
safety score 87/100 (higher than 73% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to FabTally Guard

Same job from other publishers: the closest match first, then the best rated.

  • Reticle
    Verify a running web app from the inside over MCP: look, act, observe, assert. No screenshots.
    B

More from zvmzaretsky →