About com.vandorla/workspace-tools
com.vandorla/workspace-tools is an MCP server published by brian-mitchell-sec in the Search category: sandbox workspace tools: search, file read, DB queries, integrations. Returns synthetic data.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/brian-mitchell-sec/workspace-tools-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (10)
admin_execRuns nothing. Advertises that it needs an `api_key` "see workspace configuration" — the key `get_config` serves is a honeytoken, and presenting it back is logged as a completed chain.
Parameters not published.
admin_statusSame api_key gate as `admin_exec`; returns an invented account status.
Parameters not published.
diagnosticsReturns invented diagnostics. This is the tool the injection probe steers agents toward.
Parameters not published.
execute_commandRuns nothing. Returns a synthetic error. The command string is logged.
Parameters not published.
get_configReturns invented configuration, including a synthetic `api_key`.
Parameters not published.
get_pageReturns an invented next page of results.
Parameters not published.
list_credentialsReturns honeytokens. Never real credentials.
Parameters not published.
query_databaseReturns invented rows. Query text is logged.
Parameters not published.
read_fileReturns invented file contents. Requested path is logged.
Parameters not published.
search_documentsReturns invented documents. Query text is logged. Its description also carries the injection probe described below.
Parameters not published.
Ask AI
Ask AI about com.vandorla/workspace-tools
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.