mcp server

MCP Safety Warden

MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.

Description as published by the maintainer. Source

• version 1.4.10
• active
• security

active — Most recent push to the repository was 2026-08-08. Dashed tags are derived by ZBS Index from the published description, not stated by the maintainer.

Signals

These are separate measurements of different things. They are deliberately not combined into one score, because a popularity number that mixes website traffic with saves and stars cannot be checked or acted on.

Where to get it

• Repository — https://github.com/gautamvarmadatla/mcpsafetywarden
• pypi: mcpsafetywarden

Related, by what their authors tagged them

• Bomly — last commit 2026-08-03, shares supply-chain-security, vulnerability-scanning
  Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit
• io.github.caglarbozkurt/heimdall — last commit 2026-07-06, shares agent-security, prompt-injection, security
  Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.
• Bawbel Scanner — last commit 2026-07-05, shares agent-security, ai-security, llm-security
  Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
• Bawbel Scanner — last commit 2026-07-05, shares agent-security, ai-security, llm-security
  Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
• ToolTrust Scanner — last commit 2026-08-06, shares ai-security, prompt-injection, security-scanner
  Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
• Aegis — AI Agent Governance — last commit 2026-05-05, shares agent-security, ai-safety, ai-security
  Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.
• io.github.dl-eigenart/agentshield-mcp — last commit 2026-05-11, shares agent-security, ai-safety, ai-security
  Detect prompt injection, jailbreak, and social-engineering attacks in LLM agents.
• Prism Scanner — last commit 2026-04-07, shares agent-security, security, static-analysis
  Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
• io.github.Gowthaman90/mcp-bastion — last commit 2026-08-03, shares ai-security, llm-security, prompt-injection
  Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
• io.github.calllint/calllint — last commit 2026-08-06, shares ai-security, prompt-injection, security
  Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.

These share tags the maintainers applied themselves, such as supply-chain-security, vulnerability-scanning, agent-security, prompt-injection. Common tags like "mcp" or "ai" are ignored for this: agreeing with six hundred other projects is not a similarity.

This is not a recommendation and not a test result. It is a map of what the authors said their work is about.

How the author describes it

Topics the maintainer set on GitHub: agent-security, ai-safety, ai-security, behavior-analysis, credential-protection, drift-detection, llm-security, mcp, mcp-server, model-context-protocol, model-context-protocol-servers, prompt-injection, proxy, python, security, security-scanner, static-analysis, supply-chain-security, vulnerability-scanning.