1. Conduid
  2. Security
  3. Guardmcp
MCP server · Security

Guardmcp

by · github.com/BerkantACUN/guardmcp

Security scanner for MCP (Model Context Protocol) servers and configs — tool poisoning, secret leaks, rug-pull detection, excessive permissions, insecure transport.

Unclaimed mcpmodel-context-protocolsecuritysecurity-scannersarifprompt-injectionai-security
InstallView source
37Low

Scored a month ago · breakdown

About Guardmcp

Guardmcp is an MCP server published by BerkantACUN in the Security category: security scanner for MCP (Model Context Protocol) servers and configs — tool poisoning, secret leaks, rug-pull detection, excessive permissions, insecure transport.

The repository has 2 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add guardmcp -- npx -y guardmcp
npx
npx -y guardmcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Guardmcp

Powered by Claude · Grounded in docs

I know everything about Guardmcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.17.0v0.17.0 · 24 Sep 2026Fixed — one unfamiliar server entry no longer hides the whole file A remote entry labelled with any transport other than `"http"` — `"sse"`, `"streamable-http"`, both common in Cursor, Claude Code and VS Code configs — failed schema…
v0.16.10.16.1 — CLI Linux ve macOS'ta hiçbir şey taramıyordu · 22 Sep 2026Düzeltme (kritik): `guardmcp` Linux ve macOS'ta sessizce hiçbir şey taramadan çıkıyordu. npm bu platformlarda çalıştırılabiliri simge bağı olarak kurar (`node_modules/.bin/guardmcp -> ../guardmcp/dist/cli/index.js`). Giriş noktası…
v0.16.0v0.16.0 — MCPG-106: the package the registry gave up on · 16 Sep 2026Added — MCPG-106: a server launched from a package its own registry has given up on Found by measuring, not by imagining a threat. Four of the original reference MCP servers — `server-postgres`, `server-github`, `server-puppeteer`,…
v0.15.1v0.15.1 — Marketplace-valid action description · 9 Sep 2026Fixes the `action.yml` `description`, which ran to 205 characters against the GitHub Marketplace limit of 125 and blocked the listing. Shortened to 106 without dropping what the action does. No behaviour change — same 31 rules, same CLI,…
v0.15.0v0.15.0 — a baseline you can actually create, and two rules about tool names · 9 Sep 2026Added — `guardmcp baseline`, completing a flag that could not be used `--baseline` has been able to *read* a baseline file since the first release, and nothing could write one. Fingerprints appear in no output format either, so the…
Questions

About Guardmcp

How do I install Guardmcp?

Run claude mcp add guardmcp -- npx -y guardmcp, then add the server to your MCP client's configuration.

Is Guardmcp safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Guardmcp still maintained?

Yes — the latest release is v0.17.0 (24 Sep 2026), and the last commit was a month ago. The repository has 2 stars.