GuardBee Context Oversharing Auditor MCP
A security scanner for AI agents and MCP servers that audits source code for OWASP MCP10:2025 context oversharing vulnerabilities. It detects issues such as full conversation dumps, unscoped memory tools, shared global session stores, system-prompt leaks via tools, cross-session tool-result bleed, and unfiltered vector queries.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Audit MCP server source for context oversharing vulnerabilities
- Detect full conversation dumps and unscoped memory tools
- Identify system-prompt leaks via tools and cross-session bleed
- Scan for unfiltered vector queries in agent memory
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@guardbee/mcp-context-oversharing-auditor 0.4.1
{
"version": "0.4.1",
"transport": "stdio",
"identifier": "@guardbee/mcp-context-oversharing-auditor",
"registryType": "npm"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"guardbee-context-oversharing-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-context-oversharing-auditor@0.4.1"
]
}
}
}Cline
{
"mcpServers": {
"guardbee-context-oversharing-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-context-oversharing-auditor@0.4.1"
]
}
}
}VS Code
{
"servers": {
"guardbee-context-oversharing-auditor-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-context-oversharing-auditor@0.4.1"
]
}
}
}Claude Desktop
{
"mcpServers": {
"guardbee-context-oversharing-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-context-oversharing-auditor@0.4.1"
]
}
}
}Let your agent find its tools
Find servers like GuardBee Context Oversharing Auditor MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.