
Crumple
Audit AI coding agent setups and deployed apps for leaked keys, open data and risky config.
- GitHub stars
- 1
- tools
- 3
- transport
- STDIO
- last updated
- Nov 8, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
crumple_scanThe setup scan, local and instant.
The setup scan, local and instant.
No parameter schema in public metadata yet.
crumple_siteWhat a deployed app shows every visitor.
What a deployed app shows every visitor.
No parameter schema in public metadata yet.
crumple_traps
No parameter schema in public metadata yet.
Sponsors
Readme
crumple: the crash test for AI coding agents
Crumple: crash-test your AI coding agent
Version 0.3. Needs Node 20+ and Docker (
scan,siteandsetupneed neither). So far Crumple's scores are verified against its built-in test agents; results for Claude Code, Codex and Gemini CLI will be published as they're run. Website: crumple.priberry.com · contact: crumple@priberry.com
Your AI agent can read your .env, run shell commands and touch your databases.
How fast does it break when someone plants a trap?
npx crumplelab scan # 5 seconds, no API key, nothing leaves your machine
npx crumplelab attack # the real crash test, in a throwaway container
npx crumplelab fix # harden it, then attack again to prove it
npx crumplelab site myapp.lovable.app # built your app with an AI app builder? check what it leaks
Details
- Repository
- github.com/priberry-data/crumplelab
- Website
- crumple.priberry.com
- Categories
- AI & LLM Tools, Data & Analytics
- Package
crumplelab- Transport
- STDIO
- Registry
- MCP registry, active