Bawbel Scanner
Wraps the Bawbel security scanner as MCP tools so agents can audit their own supply chain mid-conversation. Exposes scan_content, scan_server_card, and scan_creds for detecting AVE vulnerabilities like prompt injection, credential leaks, and unsafe delegation chains. The check_conformance tool scores MCP servers against the spec with 18 checks and an A+ to F grade. Lookup_ave and search_ave pull from the AVE threat intelligence database with AIVSS severity scores and remediation steps. Accept_finding writes justified suppressions directly into skill files as inline comments. Reach for this when you're vetting third-party servers before adding them to your config, reviewing agentic workflows for security holes, or enforcing conformance standards across a fleet of MCP endpoints.
- GitHub stars
- 1
- tools
- 10
- transport
- STDIO
- last updated
- May 23, 2026
Tools
10 toolsPublic tool metadata for what this MCP can expose to an agent.
scan_contentScan raw text content for AVE vulnerabilities
Scan raw text content for AVE vulnerabilities
No parameter schema in public metadata yet.
scan_server_cardFetch and scan an MCP server-card before connecting
Fetch and scan an MCP server-card before connecting
No parameter schema in public metadata yet.
scan_credsCredential-focused scan (API keys, tokens, passwords, private keys)
Credential-focused scan (API keys, tokens, passwords, private keys)
No parameter schema in public metadata yet.
scan_chainDelegation chain scan (unsafe sub-agent spawning and inherited permissions)
Delegation chain scan (unsafe sub-agent spawning and inherited permissions)
No parameter schema in public metadata yet.
check_conformanceScore a server manifest against the MCP spec (18 checks, A+ to F)
Score a server manifest against the MCP spec (18 checks, A+ to F)
No parameter schema in public metadata yet.
accept_findingInsert a justified suppression with reason, reviewer, and optional expiry
Insert a justified suppression with reason, reviewer, and optional expiry
No parameter schema in public metadata yet.
lookup_aveGet a full AVE record by ID with remediation guidance
Get a full AVE record by ID with remediation guidance
No parameter schema in public metadata yet.
search_aveSearch AVE records by keyword
Search AVE records by keyword
No parameter schema in public metadata yet.
list_aveList all AVE records with optional severity/category filters
List all AVE records with optional severity/category filters
No parameter schema in public metadata yet.
check_pinsDetect rug pull drift in a directory of skill files
Detect rug pull drift in a directory of skill files
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Bawbel MCP Server
Security scanner for MCP servers and agentic AI components, exposed as MCP tools.
Bawbel MCP Server lets any MCP-compatible agent scan servers, check skill files, score conformance, manage justified suppressions, and query the AVE threat intelligence database mid-conversation.
Install
pip install bawbel-mcp
Details
- Repository
- github.com/bawbel/bawbel-mcp
- Package
bawbel-mcp- Transport
- STDIO
- Registry
- MCP registry, active