GuardBee Ai

MCP server that audits other MCP servers' tool definitions for insecure patterns — excessive-agency tool names, shell/eval/SQL/SSRF sinks fed by raw tool input, overly permissive schemas, hardcoded secrets, and wildcard CORS

MCP server that scans code for insecure LLM/AI integration patterns — client-exposed API keys, unsafe handling of model output, excessive agent tool permissions, and PII sent to third-party LLMs

MCP server that builds a reachability graph across multi-agent orchestration configs (LangGraph, CrewAI, AutoGen/ag2) to find transitive excessive agency — an agent with no dangerous tool of its own that can still reach one through delegation or group mem

MCP server that scans other MCP servers' tool definitions for tool poisoning (hidden instructions embedded in a tool's description, read as trusted context by the calling LLM) and confused-deputy mismatches (a tool's name/description promises read-only be

MCP server that connects to another MCP server (stdio or Streamable HTTP), baselines its tools/list response, and detects 'rug pulls' — a tool silently changing description, schema, or annotations after it was already approved

MCP server that scans files and directories for exposed secrets, API keys, and credentials

Security proxy for MCP servers — intercepts tool calls, detects prompt injection, masks PII, and writes audit logs

MCP server that inspects TLS certificates, cipher suites, and protocol configurations for any domain

MCP server that scans documents, scraped pages, and RAG content for indirect prompt injection payloads — instruction-override phrases, spoofed chat-template roles, hidden/invisible text, content addressing the AI directly, and data-exfiltration attempts

MCP server that red-teams a live LLM endpoint or chatbot with canary-based jailbreak/extraction/obfuscation probes to test whether known bypass techniques defeat its guardrails

MCP server that scans ML model files (PyTorch, pickle, safetensors, Keras/H5, ONNX) for supply-chain risks — malicious pickle deserialization gadgets, disguised/malformed safetensors headers, Keras Lambda-layer RCE, and ONNX external-data path traversal

MCP server that probes vector-database endpoints (Weaviate, Qdrant, Chroma, Elasticsearch/OpenSearch, Redis, Postgres/pgvector) for unauthenticated exposure of embeddings and RAG data

MCP server that scans agent code for memory-poisoning risks — untrusted input written into persistent, cross-session memory (MemGPT-style archival/core memory, or a vector store used as a long-term knowledge base) that later gets recalled and trusted as c

MCP server that scans an MCP server's own authorization code for OAuth 2.1 anti-patterns named in the MCP spec's Security Considerations: token passthrough, missing audience validation, OAuth/OIDC discovery SSRF, missing PKCE, loose redirect_uri validatio

MCP server that audits installed MCP client configs (Cursor, Claude Desktop, Windsurf, VS Code) for unpinned packages, secrets in env/args, wildcard auto-approve, unauthenticated remote endpoints, typosquats, and cross-server tool shadowing

MCP server and reverse proxy that catches leaked credentials and PII (API keys, TC Kimlik No, credit cards, IBANs) in outbound LLM prompts before they leave your application

MCP server that scans LLM/agent application code for Unbounded Consumption ("denial of wallet") anti-patterns from OWASP LLM Top 10 2026's #6 category: missing output token limits, missing timeouts on hand-rolled LLM HTTP calls, unbounded agent tool-calli

MCP server that scans Agent2Agent (A2A) protocol implementation code for anti-patterns found in the reference SDKs and sample agents: unauthenticated push-notification webhook fetches (SSRF), Agent Cards with no authentication requirement, and credentials

MCP server that detects toxic flows (lethal trifecta) across an MCP tool catalog — untrusted content + private/sensitive data + exfiltration or destruction on the same server

MCP server that audits MCP server source for OWASP MCP08:2025 (Lack of Audit and Telemetry) — missing tool-call logging, raw args/results in logs, disabled audit sinks, and tool errors swallowed without a record

MCP server that audits agent/MCP source for OWASP MCP10:2025 context oversharing — unrestricted session/memory dumps, cross-user shared context, system-prompt leakage via tools, and unscoped vector recalls

Temporary package placeholder for staged publishing

MCP server that audits npm, pip, and cargo dependencies for known CVEs using the OSV database

MCP server that enumerates DNS records, detects misconfigurations, and identifies dangling subdomains

KVKK/GDPR-compliant MCP server gateway between LLMs and databases

Shared opt-out usage telemetry client for GuardBee MCP servers

MCP server that checks every dependency declared in package.json/requirements.txt/pyproject.toml against the real npm/PyPI registry -- flags names that don't exist at all (likely LLM-hallucinated dependencies an attacker may have pre-registered, i.e. slop

MCP server that scans MCP server code for elicitation anti-patterns in the 2026-07-28 spec: form mode asking for secrets, URL mode pointed straight at a third-party authorize endpoint, and credentials or PII embedded in the elicitation URL

GuardBee MCP bridge to Agent Threat Rules (ATR) — evaluate agent/MCP events against the open Sigma-like detection standard for prompt injection, tool poisoning, context exfiltration, and MCP attacks

Temporary package placeholder for staged publishing

MCP server that audits shipped apps for how easily they can be reverse engineered — exposed source maps, missing minification/R8/.NET obfuscation, debug info and unstripped symbols, debuggable flags, Electron fuses, unsigned binaries and embedded secrets

MCP server that checks KVKK, GDPR, and CCPA compliance for websites via the GuardBee API

MCP server that triggers GuardBee security scans, queries findings, and provides AI-assisted remediation guidance

PII masking and prompt injection detection library: checksum-validated Turkish and international identifiers, KVKK special categories, secrets, and lethal-trifecta tool classification

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence