MCP Observatory
1m ago Tracked 72,275 Last 1m ago 24h 2,663
Watchlist

Furowu/brokre

github
github analyzed 96aa085

AI-safe credential broker for MCP — run saved SSH/MySQL/psql aliases; passwords never reach AI.

maintainer
Furowu
licence
—
first seen
2026-06-12
last seen
2026-06-12
releases · 30d
0
github stars
3 reported
short id

Furowu/brokre is an MCP server distributed on github, maintained by Furowu, tracked here since June 2026. It has shipped 0 releases and exposes 11 tools. Tools include brokre_audit_list, brokre_audit_verify, brokre_bastion_policy, brokre_exec, brokre_exec_elevated, brokre_list, and 5 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

lifetime releases
0
releases · 30d
0
dependencies
0
dependents
0

what we found

Reading the source raised 2 review prompts — dangerous code and purpose mismatch — each a pattern worth a human look rather than a finding of fault.

Its 11 tools appear to reach shell / exec, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-27: 1 tool added.

full security breakdown →

tools

11
  • brokre_audit_list Query audit history (metadata only — args redacted)
  • brokre_audit_verify Verify tamper-evident audit log chain
  • brokre_bastion_policy Read or set bastion gate mode (default / strict); returns key_set, unlocked
  • brokre_exec Run any saved CLI alias (binary + args); ssh supports shell_command for remote scripts; ssh + sudo/su auto-reuses elevated session
  • brokre_exec_elevated Remote privileged command (alias, command, mode); default session=reuse (10 min idle timeout)
  • brokre_list Saved local aliases by default; set include_bastions=true to discover routed aliases (b150::db), which may require bastion unlock; includes…
  • brokre_setup Open manage UI in browser for the human to add creds
  • mode sudo, sudo_login (or sudo-i), su
  • session reuse (default), new (close old session and open fresh), close (end session; pass command: "")
  • sudo use brokre ssh alias sudo cmd or MCP brokre_exec_elevated; sudo -n on sudo-rs is non-interactive and brokre cannot inject a password.
  • user su mode only; default root

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.