# MCP Safety Warden

A proxy that profiles MCP tools, scans calls, and gates risky actions. Use it to audit a server or place checks before tool execution.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 8
- Author: gautamvarmadatla
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/gautamvarmadatla/mcpsafetywarden
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/mcp-safety-warden

## What it does

MCP Safety Warden sits between an MCP client and another MCP server. It records tool behavior, checks arguments and returned content, applies per-tool risk decisions, and watches for drift. An audit mode can inspect a server without invoking its tools.

Its checks cover prompt-injection patterns, hostile metadata, credential-file access, SSRF, path traversal, and other argument attacks. It can pull GitHub source for secret detection, taint analysis, SAST checks, and mismatch review; source analysis covers Python and TypeScript/JavaScript. The first scan stores a SHA-256 value for later change alerts.

The CLI provides 24 subcommands, an interactive risk menu, `--json`, and `--yes`. Setup uses `uvx`, so that executable must be available before the command will start the server.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add mcpsafetywarden -- uvx mcpsafetywarden
```
uvx runs the command named after the package; if the README names another one, use uvx --from mcpsafetywarden <command>

### Codex

**Platform CLI**
```bash
codex mcp add mcp-safety-warden -- uvx mcpsafetywarden
```
uvx runs the command named after the package; if the README names another one, use uvx --from mcpsafetywarden <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "mcp-safety-warden": {
            "command": "uvx",
            "args": [
                "mcpsafetywarden"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from mcpsafetywarden <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "mcp-safety-warden": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "mcpsafetywarden"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from mcpsafetywarden <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add mcp-safety-warden uvx mcpsafetywarden
```
uvx runs the command named after the package; if the README names another one, use uvx --from mcpsafetywarden <command>

## When to use it
- audit an MCP server without invoking its tools
- screen tool arguments before forwarding calls
- spot prompt injection in tool output
- scan source code for secrets and unsafe data flows
- detect changes to tool schemas and inventory

## Example prompts
- Audit the connected MCP server without running any of its tools.
- Inspect this tool call for prompt injection, credential-file access, SSRF, and path traversal before forwarding it.
- Check whether the MCP server has drifted since its first scan and report the change.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 392262
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89609
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12110
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7718
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2066
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1816

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md