Local MCP server that inventories and risk-grades MCP servers configured on this machine.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport http
verified
reported
listed in the official MCP registry counts 4 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
deep_scan
-
discover_local
-
list_sources
-
scan_local
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit fc57338 · analyzer v33 · 4d ago
skills & prompt files 1
- agent-rules saagpatel-shadow-mcp-fc57338/AGENTS.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 36
tool registrations 4
- scan_local saagpatel-shadow-mcp-fc57338/src/shadow_mcp/mcp_server.py :83
- discover_local saagpatel-shadow-mcp-fc57338/src/shadow_mcp/mcp_server.py :88
- deep_scan saagpatel-shadow-mcp-fc57338/src/shadow_mcp/mcp_server.py :93
- list_sources saagpatel-shadow-mcp-fc57338/src/shadow_mcp/mcp_server.py :98