Skip to main content
Glama
BackBond

BackBond Agent Scan

Official

Related Servers

Alternatives to BackBond Agent Scan

No user-submitted related servers found.

    Related Servers

    • A
      license
      Not graded
      quality
      A
      maintenance
      Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools.
      1
      MIT
    • A
      license
      Not graded
      quality
      A
      maintenance
      Enables an agent or MCP client to scan MCP server configs and AI-agent tool manifests on demand, exposing tools that list detection rules and report hidden prompt injections, data-exfiltration attempts, embedded secrets, deceptive Unicode, unpinned packages and shell-launching tools. Each finding comes with a severity and location so risky tool descriptions can be caught before an attacker exploits them.
      Apache 2.0
    • F
      license
      Not graded
      quality
      D
      maintenance
      Runtime allowlist and policy for agent tool-calls, enabling security scanning (e.g., TODO/FIXME/XXX findings) via MCP for AI agents.
      -
    • A
      license
      Not graded
      quality
      C
      maintenance
      A read-only MCP server that lets an agent audit its own environment by discovering local MCP configurations and skill folders on Windows, macOS, and Linux and running offline static checks for prompt injection, hidden instructions, hardcoded secrets, dangerous commands, unpinned packages, and excessive filesystem or transport permissions. It exposes tools to scan everything discovered, list configurations, vet a single skill, or analyze supplied text, returning text, JSON, SARIF, or HTML findings with CI-friendly severity levels.
      436 npm
      MIT

    TDQS

    A4/5.0

    Scored across 2 tools

    Disambiguation3/5

    Both tools perform static analysis of tool manifests and focus on exposure/gating, so their purposes overlap. Descriptions distinguish scanning the current runtime from vetting a proposed list before attachment, but an agent could still misselect when the intent is simply 'check tools for safety.'

    Naming Consistency4/5

    Both names use snake_case and start with an action verb, which is readable and mostly consistent. However, scan_my_runtime uses a first-person possessive while vet_tools_before_attach uses a temporal prepositional phrase, so they do not follow a single predictable verb_noun pattern.

    Tool Count3/5

    Two tools is thin for a security scanning server, even a focused one, and the overlap between them makes the small surface feel less intentional. It is not excessive, but it borders on under-scoped.

    Completeness4/5

    The server covers the two core moments in its apparent domain: scanning an existing runtime and gating proposed tools before attachment. Minor gaps remain around explaining findings, remediating issues, or configuring policy, but the central lifecycle is represented.

    Maintenance

    ActivityMaintained
    ResponsivenessUnresponsive