Skip to main content
Glama
alexar76

warden

by alexar76
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

List the published WARDEN static-scan rule table

list_scan_rules
Read-onlyIdempotent

Return the in-force static-scan ruleset: version, digest, and every rule's code, severity, tier (block vs advise), surfaces (name / description / inputSchema / title / outputSchema / annotations / metadata), optional regex source, and…

Instructions

Return the in-force static-scan ruleset: version, digest, and every rule's code, severity, tier (block vs advise), surfaces (name / description / inputSchema / title / outputSchema / annotations / metadata), optional regex source, and named guards. A recorded verdict is only reproducible together with this identity.

When to use: explain a finding code, confirm you are on ruleset v14, or re-run a scan with the same table. include_source=true adds the regex source and flags for an independent re-implementation.

When NOT to use: evaluating a live tools/list (static_scan_tools or vet_mcp_server — those apply the table). This tool does not scan anything.

Behaviour: local snapshot of the compiled rule table, no network, no mutation. Digest is sha256 over the RFC 8785 form of {version, fold, rules} (each rule carries its raw flag).

Returns the ruleset object. Example: list_scan_rules({ include_source: false }).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
include_sourceNoWhen true, each rule includes source (regex body) and flags so a third party can re-run the exact pattern. Default false — identity, tier, surfaces, and guards only, smaller payload.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
foldYesIdentity of the text normalisation applied before a non-raw rule is matched.
rulesYes
digestYessha256-<base64> of the canonical rule table (preimage {version, fold, rules}).
versionYesMonotonic ruleset version.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed6 schema fields changedv0.16.0
    • changedOutput schema / properties / digest / description
      Previous value: -"sha256-<base64> of the canonical rule table."New value: +"sha256-<base64> of the canonical rule table (preimage {version, fold, rules})."
    • addedOutput schema / properties / fold
      Added value: +{
+  "description": "Identity of the text normalisation applied before a non-raw rule is matched.",
+  "type": "string"
+}
    • addedOutput schema / properties / rules / items / properties / raw
      Added value: +{
+  "description": "true: matches the raw text; false: matches the folded text (see fold).",
+  "type": "boolean"
+}
    • changedOutput schema / properties / rules / items / properties / surfaces / items / enum
      Previous value: -[
-  "name",
-  "description",
-  "inputSchema"
-]New value: +[
+  "name",
+  "description",
+  "inputSchema",
+  "title",
+  "outputSchema",
+  "annotations",
+  "metadata"
+]
    • changedOutput schema / properties / rules / items / required
      Previous value: -[
-  "code",
-  "severity",
-  "tier",
-  "surfaces",
-  "guards"
-]New value: +[
+  "code",
+  "severity",
+  "tier",
+  "surfaces",
+  "guards",
+  "raw"
+]
    • changedOutput schema / required
      Previous value: -[
-  "version",
-  "digest",
-  "rules"
-]New value: +[
+  "version",
+  "fold",
+  "digest",
+  "rules"
+]
  2. First observedv1.0.0

TDQS

Score is being calculated.

Deploy Server

Other Tools