toolfence

dhb520cat/toolfence
★ 0 stars Python Security Updated 1d ago
Security audit for MCP servers and agent tool-chains. Read-only: never executes scanned code, never calls tools/call.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "toolfence": {
      "command": "uvx",
      "args": [
        "toolfence"
      ]
    }
  }
}

Or install with pip: pip install toolfence

README Excerpt

Security audit for MCP servers and agent tool-chains. Read-only: it never executes the code it scans and never calls `tools/call`. ```bash toolfence https://github.com/owner/repo # scan a repo (extracts tools from source) toolfence ./path/to/server # scan a local checkout toolfence tools.json # scan a tools/list export

Tools (7)

ANNOTATION_MISMATCHCREDENTIAL_IN_PARAMDESTRUCTIVE_NO_CONFIRMHONEYPOTINJECTION_SURFACEPII_EXPOSUREUNBOUNDED_SCOPE

Topics

agent-securityai-agentsllm-securitymcpmcp-servermodel-context-protocolprompt-injectionsecuritysecurity-auditstatic-analysis