← Back to search

mcpwall

behrensd Scanned 26d ago

Deterministic security proxy for MCP tool calls. Blocks dangerous requests, redacts secrets from responses, catches prompt injection. No AI, no cloud, pure rules.

npm ↗
? Not scanned yet

Versions

0.3.1latest
Feb 25, 2026
0.3.0
Feb 23, 2026
0.2.0
Feb 20, 2026
0.1.2
Feb 17, 2026
0.1.1
Feb 17, 2026
+ show 1 moreshow less
0.1.0
Feb 17, 2026

Tools 0

No tools indexed yet.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 49

medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: next@15.1.0 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.0 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.0 (GHSA-3ppc-4f35-3m26) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.2.0 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-67rr-84xm-4c7r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-9qr9-h5gf-34mp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.1.0 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 225 components sbom_generator · 100%
critical
AWS Access Key ID found in behrensd-mcpwall-c5a8b25/demo/echo-server.mjs secret_scanner · 95%
critical
Database URL with Password found in behrensd-mcpwall-c5a8b25/demo/echo-server.mjs secret_scanner · 85%
critical
AWS Access Key ID found in behrensd-mcpwall-c5a8b25/site/app/blog/your-mcp-tools-are-a-backdoor/AttackSection.tsx secret_scanner · 95%
critical
AWS Access Key ID found in behrensd-mcpwall-c5a8b25/site/app/blog/your-mcp-tools-are-a-backdoor/page.tsx secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%