"author:actions-marketplace-validations" matching MCP servers:

Provides security audit primitives for MCP servers, agent tool schemas, and system prompts, along with pentest utilities like JWT inspection and HTTP diffing.

Acts as a proxy between an MCP client and one or more MCP servers, aggregating upstream tool definitions and exposing only the top-k tools that best match the current task intent. It enables users to shrink large tool catalogs via hybrid retrieval over tool names and descriptions, with intent set through CLI flags or a runtime control tool, while routing tool calls to the correct upstream server.

Enables static security scanning of MCP servers, AI agent skills, and plugins by detecting attack patterns across severity levels and producing SARIF output for GitHub Code Scanning.