Skip to main content
Glama
Nu1lstep

mcp-hardened

by Nu1lstep
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to mcp-hardened

No user-submitted related servers found.

    Related Servers

    • mcp-trust-demo

      SteveMonsway
      F
      license
      Not graded
      quality
      D
      maintenance
      An intentionally vulnerable MCP server designed as a live demo target for the MCP Trust security scanner. It contains deliberate insecure patterns to demonstrate scanning capabilities.
      -

    • Local Knowledge MCP

      TuanLe-bk18
      A
      license
      Not graded
      quality
      B
      maintenance
      A security-first, read-only MCP server that lets clients browse and read text, PDF, and XLSX files from an explicit allowlist of local folders, with strict path and secret protections.
      MIT

    • Permissioned MCP Server

      sn0bored
      A
      license
      A
      quality
      D
      maintenance
      A compact MCP server demonstrating explicit tool boundaries, least-privilege discovery, execution-time authorization, destructive-action confirmation, and metadata-only audit logs using a local note store.
      3
      MIT

    • Insecure MCP Demo

      kenhuangus
      F
      license
      Not graded
      quality
      C
      maintenance
      A deliberately vulnerable MCP server that allows clients to interact with a database for educational purposes, demonstrating security vulnerabilities including SQL injection, arbitrary code execution, and sensitive data exposure.
      4
      -
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.2/5.0

    Scored across 4 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose: ping for smoke testing, search_files for reading a note, query_records for searching records, and fetch_doc for retrieving a URL. There is no overlap or ambiguity between them.

    Naming Consistency3/5

    Three tools follow a verb_noun pattern (search_files, query_records, fetch_doc), but 'ping' is a standalone command and 'search_files' is misleading since it actually reads a note rather than searching files. This mixing of conventions reduces consistency.

    Tool Count5/5

    The four tools form a compact and well-scoped set for a lightweight server, covering a smoke test, file access, record lookup, and URL fetching without unnecessary bloat.

    Completeness3/5

    The toolset offers read operations for different resources but lacks discovery methods (e.g., listing notes, categories, or available URLs) and any write capabilities. This limits the ability to perform full workflows without prior external knowledge.

    Maintenance

    ActivityStale
    ResponsivenessNo issues

    Resources