MCP Safety Warden
A proxy server that wraps any MCP server, adding behavioral profiling, security scanning, risk gating, and safe execution to its tools.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
gautamvarmadatla
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
OLLAMA_BASE_URLOllama API base URLOLLAMA_MODELModel name for Ollama (e.g. llama3.1)GEMINI_API_KEYEnables Gemini as LLM provider (GEMINI_API_KEY preferred)GOOGLE_API_KEYEnables Gemini as LLM provider (GEMINI_API_KEY preferred)MCP_DB_ENCRYPTION_KEYSet the printed key as before starting the server. This encrypts both server credentials and cref_ values at rest.MCP_DB_PATHOverride the SQLite database file pathPROGRAMDATAMCP_SANDBOX_IMAGEMCP_SANDBOX_MICROVM_CMDMCP_SANDBOXANTHROPIC_API_KEYEnables Anthropic as LLM providerOPENAI_API_KEYEnables OpenAI as LLM providerSNYK_TOKENEnables Snyk E001 prompt-injection detectionMCP_SCANNER_LLM_API_KEYLLM key for Cisco internal AST analysisMCP_SCANNER_API_KEYCisco AI Defense cloud ML engine keyGITHUB_TOKENGitHub personal access token for source-code scanning (raises rate limit from 60 to 5,000 req/hour)GH_TOKENMCP_AUTH_TOKENBearer token for HTTP transport authMCP_TRANSPORTTransport mode: stdio, sse, or streamable_httpMCP_HOSTBind address for HTTP transportsMCP_PORTBind port for HTTP transportsMCP_GRAPH_POLICYGraph enforcement in safe_tool_call: off (disabled), warn (attach risk context to response), block (hard-block critical/high blast-radius tools unless approved=True)Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
25/25 tools missing one or more hints — list_servers (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_server_tools (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); preflight_tool_call (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +22 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
19/25 tools referenced in tests (76%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/gautamvarmadatla/mcpsafetywarden)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check