warden
Related Servers
Alternatives to warden
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityBmaintenanceA firewall proxy for any stdio MCP server: every tool call is checked against a restrict-only policy before it runs, with encoded-argument inspection, taint tracking so private data can't leave, tool pinning, and a write-ahead audit log.Apache 2.0
- AlicenseAqualityAmaintenanceSupply-chain gate for AI agent skills and MCP servers: poison-scan tool definitions, hash-pin the vetted set into a lock file and verify drift in CI. truecopy-mcp is a drop-in stdio proxy that filters a live server's tools/list down to its pinned, unmodified, unpoisoned tools.269 npm1MIT
- AlicenseAqualityBmaintenanceA local stdio proxy that pins every MCP tool definition when you approve a server and blocks the session with a diff if a description, schema or annotation changes later. A deterministic hash compare (RFC 8785 + SHA-256), with no model in the loop.4162 npm4MIT
- AlicenseNot gradedqualityDmaintenanceSecurity scanner and runtime proxy for MCP servers. Catches tool poisoning, prompt injection, and rug-pull attacks (silent tool description changes) before they reach your AI agent. Includes a static scanner and a runtime stdio proxy.65 npmMIT
- AlicenseAqualityBmaintenanceSecurity for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.17104 npmMIT

yotta-verify-mcpofficial
AlicenseNot gradedqualityBmaintenanceProvides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.610 npmMIT
TDQS
Scored across 9 tools
The tools have clearly distinct roles: full vetting, static-only scanning, rules introspection, approval lifecycle, URL egress checking, tool-name classification, and JSON canonicalization. The descriptions explicitly clarify overlaps such as vet_mcp_server vs static_scan_tools and approve/revoke/status, so an agent can select correctly.
All names use snake_case and are mostly action-oriented (approve_mcp_server, revoke_mcp_server, check_egress_url, canonicalize_json). Minor deviations exist, such as status_mcp_server being noun-first and static_scan_tools reading as an adjective/verb phrase, but the convention is still predictable.
Nine tools is well-scoped for a security vetting and approval server. Each tool serves a distinct part of the workflow, with no redundant or filler tools.
The surface covers the core lifecycle: full vetting, static scanning, rule inspection, approval review, approve/revoke, policy classification, egress checks, and canonicalization. Minor gaps remain, such as no global listing of all approved servers, but no major workflow dead end is apparent.