workspace-tools
Server Details
Research honeypot. Logs connections and tool arguments; injects instructions. Read README first.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- brian-mitchell-sec/workspace-tools-mcp
- GitHub Stars
- 0
TDQS
Scored across 10 tools
Most tools are distinct, but admin_exec and execute_command have overlapping purposes—both execute commands with admin privileges, and the distinction between 'administrative command' and 'shell command' is unclear. diagnostics and admin_status also have a slight overlap in checking system state, though their intended usage differs.
The naming is predominantly verb_noun (e.g., get_config, query_database), but several tools deviate: diagnostics is a bare noun, and admin_exec/admin_status use an adjective prefix rather than a verb. This mix creates inconsistency, though the convention is still readable and predictable overall.
With 10 tools, the server is well-scoped for a workspace utility—covering admin, file, database, search, credentials, and pagination. Each tool has a clear role, and the count is within the ideal range for a practical MCP server.
The surface is read-heavy: read_file, query_database, get_config, list_credentials, and search_documents. Missing core workspace operations like listing files/directories, writing files, or managing credentials (beyond listing) create notable gaps. execute_command and admin_exec provide some write/action capability, but the absence of file write and directory listing limits full workflow completion.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
- First observed
admin_exec - First observed
admin_status - First observed
diagnostics - First observed
execute_command - First observed
get_config - First observed
get_page - First observed
list_credentials - First observed
query_database - First observed
read_file - First observed
search_documents
Related MCP Connectors
Security research canary remote MCP server for owned-account testing.
Honeypot probe data: IP reputation, scanners, CVE probing, TLS and SSH fingerprints.
Security intelligence for AI agents. 27 x402 endpoints: honeypot, forensics, CAPTCHA, preflight.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables defenders to deploy a decoy MCP tool server that records and fingerprints how LLM agents probe, escalate, and persist, without exposing real systems.MIT
- AlicenseCqualityCmaintenanceAn educational MCP server exposing shell command execution (PowerShell and sh) and a benign tool for learning about MCP tools, resources, and security risks like tool poisoning.33MIT
- FlicenseNot gradedqualityCmaintenanceSimulates the Deadbugz MCP supply-chain attack for educational and research purposes, demonstrating a 3-call gate evasion where tool descriptions mutate to steal credentials.-
- AlicenseNot gradedqualityCmaintenanceA rogue MCP server (~90 lines) that demonstrates prompt injection via tool responses to achieve remote code execution on a developer's machine.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.