Skip to main content
Glama
elberacasa

Umbra

by elberacasa
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to Umbra

  • secscan-mcp

    openjkai
    A
    license
    A
    quality
    A
    maintenance
    MCP server for Cursor that scans codebases for security issues including hardcoded secrets, SAST, vulnerable dependencies, and IaC misconfigurations.
    7
    MIT

Related Servers

  • agentgraph-trust by AgentAvow

    agentgraph-trustofficial

    AgentAvow
    A
    license
    A
    quality
    C
    maintenance
    Security scanner and trust verification for AI agent tools. Scans GitHub repositories for vulnerabilities and returns signed trust attestations (Ed25519/JWS) with trust-tiered rate limiting recommendations.
    10
    4
    MIT

  • opzyai

    thfothijn
    A
    license
    Not graded
    quality
    B
    maintenance
    Local-first security check for AI coding agents — finds hardcoded secrets, exposed .env files, git-history leaks and vulnerable dependencies (OSV), entirely on your machine. Ask your agent "is this safe to ship?" and get a Launch Readiness score with a fix for every finding.
    MIT

  • vibecheck

    ArisRhiannon
    A
    license
    A
    quality
    D
    maintenance
    Agent-native "safe to ship?" security gate for AI-generated code. Uses real parsers and inter-rocedural taint analysis (JS/TS, Python, Go) to flag the classes AI coding agents get wrong — secrets, SQL injection, SS, SSRF, path traversal, command injection, weak JWT/CORS — and ranks findings by confidence. Exposes a scan tool over MCP.
    1
    6 npm
    2
    MIT

  • GuardianShield

    sparkvibe-io
    A
    license
    B
    quality
    D
    maintenance
    Universal AI security layer for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.
    27
    3
    Apache 2.0
Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.4/5.0

Scored across 3 tools

Disambiguation4/5

scan_repo and get_score both assess repository trust, but scan_repo provides a comprehensive report with findings while get_score is a fast static-only subset, making them distinguishable. guard_content is clearly distinct for write-time guarding.

Naming Consistency5/5

All tool names follow the verb_noun snake_case pattern (scan_repo, get_score, guard_content), which is consistent and predictable.

Tool Count5/5

Three tools is appropriate for the focused domain of repository trust scoring and content guarding; each tool has a clear purpose.

Completeness4/5

The set covers the main workflows: full scanning, quick scoring, and pre-write content guarding. Minor gaps exist, such as no explicit tool for retrieving historical reports or updating guard rules, but agents can work around these.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources