Search / io.github.bawbel/scanner
Bawbel Scanner
L0· runs locallySecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
v1.2.3 · active · repository · descriptor JSON · versions
Search / io.github.bawbel/scanner
L0· runs locallySecurity scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
v1.2.3 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"scanner": {
"command": "uvx",
"args": [
"bawbel-scanner==1.2.3",
"--path",
"."
]
}
}
}claude mcp add scanner -- uvx bawbel-scanner==1.2.3 --path .[mcp_servers.scanner]
command = "uvx"
args = ["bawbel-scanner==1.2.3", "--path", "."]
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"scanner": {
"type": "local",
"command": [
"uvx",
"bawbel-scanner==1.2.3",
"--path",
"."
],
"enabled": true
}
}
}{
"mcpServers": {
"scanner": {
"command": "uvx",
"args": [
"bawbel-scanner==1.2.3",
"--path",
"."
]
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=scanner&config=eyJjb21tYW5kIjoidXZ4IiwiYXJncyI6WyJiYXdiZWwtc2Nhbm5lcj09MS4yLjMiLCItLXBhdGgiLCIuIl19"
}{
"servers": {
"scanner": {
"type": "stdio",
"command": "uvx",
"args": [
"bawbel-scanner==1.2.3",
"--path",
"."
]
}
}
}{
"mcpServers": {
"scanner": {
"command": "uvx",
"args": [
"bawbel-scanner==1.2.3",
"--path",
"."
]
}
}
}extensions:
"scanner":
enabled: true
name: "scanner"
type: stdio
cmd: "uvx"
args:
- "bawbel-scanner==1.2.3"
- "--path"
- "."
timeout: 300
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulnsno known advisory in 11 resolved packagesdeps.mcp_sdk_versionthe official MCP SDK is not in the dependency graphdeps.resolvable[email protected] resolved: 11 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured ~updated-149d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI10 dependencies, resolved · advisories checked 2026-10-19
No known advisory affects this dependency graph.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
bawbel-scanner | pypi | 1.2.3 | uvx |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.bawbel/scanner",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"license": "Apache-2.0",
"categories": [
"security",
"devsecops",
"scanner",
"vulnerability"
],
"ave_records": 45,
"threat_intel_api": "https://api.piranha.bawbel.io",
"owasp_mcp_mapping": true
}
},
"title": "Bawbel Scanner",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "1.2.3",
"packages": [
{
"version": "1.2.3",
"transport": {
"type": "stdio"
},
"identifier": "bawbel-scanner",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"packageArguments": [
{
"name": "--path",
"type": "named",
"default": ".",
"description": "File or directory to scan"
}
]
}
],
"repository": {
"url": "https://github.com/bawbel/scanner",
"source": "github"
},
"description": "Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production."
}