warden
Related Servers
Alternatives to warden
No user-submitted related servers found.
Related Servers
- AlicenseAqualityAmaintenanceSupply-chain gate for AI agent skills and MCP servers: poison-scan tool definitions, hash-pin the vetted set into a lock file and verify drift in CI. truecopy-mcp is a drop-in stdio proxy that filters a live server's tools/list down to its pinned, unmodified, unpoisoned tools.292 npm1MIT
- AlicenseAqualityAmaintenanceA local stdio proxy that pins every MCP tool definition when you approve a server and blocks the session with a diff if a description, schema or annotation changes later. A deterministic hash compare (RFC 8785 + SHA-256), with no model in the loop.441 npm3MIT
- AlicenseNot gradedqualityBmaintenanceSecurity scanner and runtime proxy for MCP servers. Catches tool poisoning, prompt injection, and rug-pull attacks (silent tool description changes) before they reach your AI agent. Includes a static scanner and a runtime stdio proxy.40 npmMIT
- AlicenseAqualityAmaintenanceSecurity for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.1759 npmMIT

yotta-verify-mcpofficial
AlicenseNot gradedqualityBmaintenanceProvides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.74 npmMIT- AlicenseNot gradedqualityBmaintenanceSelf-hosted MCP gateway that applies deterministic, compiled policy to tool discovery, invocation, and outbound data flow, with no model in the enforcement path. Every decision emits a hash-chained receipt sealed with Ed25519 and verifiable using public keys only.Apache 2.0
TDQS
Scored across 9 tools
Most tools have sharply distinct purposes, and the descriptions explicitly cross-reference when to use each vs alternatives (e.g. vet_mcp_server vs static_scan_tools vs list_scan_rules). The exception is the approval trio (status_mcp_server / approve_mcp_server / revoke_mcp_server), whose descriptions are near-identical copy-paste text that even mislabels itself as 'status a local server approval', leaving boundary clarity to the names alone.
All nine tools use consistent snake_case verb_noun/verb_object patterns (check_egress_url, static_scan_tools, list_scan_rules, approve_mcp_server). No mixed conventions or arbitrary casing.
Nine tools is well within the ideal range and each maps to a distinct stage of an MCP vetting workflow (scan, classify, vet, canonicalize, egress, rules, approval lifecycle). Nothing feels padded or missing at the count level.
The surface covers the core vetting lifecycle: granular vs full scanning, sensitive-tool classification, rule introspection, JSON canonicalization for signatures, egress allowlisting, and approval status/approve/revoke. Minor gaps remain (no direct tool to list existing pins or manage the threat feed), but agents can work around them.