@guardbee/mcp-server-auditor MCP
Scans other MCP servers' tool definitions for insecure patterns including excessive agency, shell/eval/SQL/SSRF sinks, loose schemas, hardcoded secrets, and wildcard CORS.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan MCP tool definitions for excessive agency
- Detect shell, eval, SQL, and SSRF sinks
- Identify hardcoded secrets in tool schemas
- Check for wildcard CORS configurations
Source and maintenance
Community listingRegistry 0.1.5
mcp-registry: io.github.4hmetuyar/mcp-server-auditor@0.1.5mcp-registry: io.github.GuardBee/mcp-server-auditor@0.4.1Source repository
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@guardbee/mcp-server-auditor 0.1.5
npm
@guardbee/mcp-server-auditor package definition
{
"version": "0.1.5",
"transport": "stdio",
"identifier": "@guardbee/mcp-server-auditor",
"registryType": "npm"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
Cursor configuration
{
"mcpServers": {
"guardbee-mcp-server-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-server-auditor@0.1.5"
]
}
}
}Cline
Cline configuration
{
"mcpServers": {
"guardbee-mcp-server-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-server-auditor@0.1.5"
]
}
}
}VS Code
VS Code configuration
{
"servers": {
"guardbee-mcp-server-auditor-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-server-auditor@0.1.5"
]
}
}
}Claude Desktop
Claude Desktop configuration
{
"mcpServers": {
"guardbee-mcp-server-auditor-mcp": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-server-auditor@0.1.5"
]
}
}
}Let your agent find its tools
Find servers like @guardbee/mcp-server-auditor MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.