1. Conduid
  2. Security
  3. Boundary Audit
MCP server · Security

Boundary Audit

Detects MCP tools hidden from tools/list yet reachable via tools/call; the bundled mock reproduces FAIL and PASS. Actively calls operator-named tools; 11 tests, CI. Does not discover unknown tool names, and is validated against the bundled mock, not a third-party deployment.

34Low

Scored 28 days ago · breakdown

About Boundary Audit

Boundary Audit is an MCP server published by repowazdogz-droid in the Security category: detects MCP tools hidden from tools/list yet reachable via tools/call; the bundled mock reproduces FAIL and PASS. Actively calls operator-named tools; 11 tests, CI. Does not discover unknown tool names, and is validated against the bundled mock, not a third-party deployment.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/repowazdogz-droid/mcp-boundary-audit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Boundary Audit

Powered by Claude · Grounded in docs

I know everything about Boundary Audit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.1.0v0.1.0 · 13 Jul 2026First public release. What it is.** A small, safety-first harness that detects one MCP authorization bug: a tool hidden from `tools/list` that is still reachable through `tools/call` — the failure class in advisories such as…
Questions

About Boundary Audit

How do I install Boundary Audit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Boundary Audit safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Boundary Audit still maintained?

Yes — the latest release is v0.1.0 (13 Jul 2026), and the last commit was 3 months ago. The repository has 0 stars.