Skip to main content
Glama

Related Servers

Alternatives to Sandbox Code Auditor MCP

No user-submitted related servers found.

    Related Servers

    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables real-time injection fuzzing and canary-based exfiltration detection over untrusted prompts, RAG context, and agent actions, with entropy analysis, outbound channel interception, least-privilege sandboxing, and cryptographic audit proofs.
      7
      MIT
    • F
      license
      B
      quality
      C
      maintenance
      Enables AI agents to audit web headers and DOM code, API routes, and database queries for vulnerabilities such as XSS, BOLA/IDOR, and SQL/NoSQL injection, returning scored CWE findings. It also automatically synthesizes secure drop-in replacement code with unified git diffs for review.
      24
      -
    • A
      license
      B
      quality
      B
      maintenance
      Enables pre-execution security checks and sandboxed execution for AI agent workflows, including prompt-injection detection, MCP rugpull and sampling abuse protection, untrusted tool-output sanitization, loop circuit breaking, SQL AST validation, PII redaction, and ephemeral Python execution.
      8
      2
      MIT
    • A
      license
      Not graded
      quality
      D
      maintenance
      Full-stack security for AI agents — static analysis + MCP runtime interception. 31 rules detect prompt injection, data exfiltration, backdoors, tool poisoning, and cross-file attack chains. Includes MCP proxy for real-time blocking, Python AST taint tracking, multi-language injection detection (8 languages), and AI-powered deep analysis. Free, offline, zero-config.
      83 npm
      16
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to run cybersecurity reconnaissance and analysis tools through controlled containerized sandboxes, with input validation, policy allowlists, timeouts, structured JSON output, and immutable audit logging.
      MIT

    TDQS

    A4/5.0

    Scored across 5 tools

    Disambiguation5/5

    Each tool targets a completely distinct artifact and vulnerability class (Python AST escape, SQL taint, regex ReDoS, Seccomp BPF, CORS headers). There is no realistic scenario where an agent would confuse one for another, and the descriptions reinforce the boundaries.

    Naming Consistency5/5

    All five names follow a strict snake_case pattern of <domain>_<subject>_<agent-noun>, e.g. python_ast_sandbox_escape_detector, regex_redos_exponential_scanner. The convention is applied uniformly with no stylistic deviations.

    Tool Count5/5

    Five tools is a well-scoped set for a focused security-audit server, with each tool covering a distinct check. No tool feels redundant or missing for the stated surface.

    Completeness4/5

    The surface covers several sandbox-relevant classes (escape, SQLi, ReDoS, seccomp, CORS) but omits common adjacent checks like shell injection, deserialization/pickle, and path traversal. Agents can work around these gaps, and notably one tool generates filters while the rest audit, a minor asymmetry.