Skip to main content
Glama

Related Servers

Alternatives to warden

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      A
      maintenance
      Supply-chain gate for AI agent skills and MCP servers: poison-scan tool definitions, hash-pin the vetted set into a lock file and verify drift in CI. truecopy-mcp is a drop-in stdio proxy that filters a live server's tools/list down to its pinned, unmodified, unpoisoned tools.
      2
      92 npm
      1
      MIT
    • A
      license
      A
      quality
      A
      maintenance
      A local stdio proxy that pins every MCP tool definition when you approve a server and blocks the session with a diff if a description, schema or annotation changes later. A deterministic hash compare (RFC 8785 + SHA-256), with no model in the loop.
      4
      41 npm
      3
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Security scanner and runtime proxy for MCP servers. Catches tool poisoning, prompt injection, and rug-pull attacks (silent tool description changes) before they reach your AI agent. Includes a static scanner and a runtime stdio proxy.
      40 npm
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Provides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.
      74 npm
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Self-hosted MCP gateway that applies deterministic, compiled policy to tool discovery, invocation, and outbound data flow, with no model in the enforcement path. Every decision emits a hash-chained receipt sealed with Ed25519 and verifiable using public keys only.
      Apache 2.0

    TDQS

    A4.4/5.0

    Scored across 9 tools

    Disambiguation4/5

    Most tools have sharply distinct purposes, and the descriptions explicitly cross-reference when to use each vs alternatives (e.g. vet_mcp_server vs static_scan_tools vs list_scan_rules). The exception is the approval trio (status_mcp_server / approve_mcp_server / revoke_mcp_server), whose descriptions are near-identical copy-paste text that even mislabels itself as 'status a local server approval', leaving boundary clarity to the names alone.

    Naming Consistency5/5

    All nine tools use consistent snake_case verb_noun/verb_object patterns (check_egress_url, static_scan_tools, list_scan_rules, approve_mcp_server). No mixed conventions or arbitrary casing.

    Tool Count5/5

    Nine tools is well within the ideal range and each maps to a distinct stage of an MCP vetting workflow (scan, classify, vet, canonicalize, egress, rules, approval lifecycle). Nothing feels padded or missing at the count level.

    Completeness4/5

    The surface covers the core vetting lifecycle: granular vs full scanning, sensitive-tool classification, rule introspection, JSON canonicalization for signatures, egress allowlisting, and approval status/approve/revoke. Minor gaps remain (no direct tool to list existing pins or manage the threat feed), but agents can work around them.

    Maintenance

    ActivityActive
    ResponsivenessNo issues