io.github.soufianetahiri/mception
Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.
Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.
Own this server? Screen its description →
MCEPTION_DATA_DIRWhere audit reports and rug-pull baselines live. Defaults to ~/.mception.
MCEPTION_OFFLINESet to 1 to block outbound HTTP (OSV, registry signals, phantom-repo probes).
MCEPTION_INTROSPECT_TIMEOUTPer-target timeout in seconds for the fetcher + engine pipeline.
MCEPTION_ENABLE_LLM_JUDGESet to 1 to enable advisory LLM-assisted classification via MCP sampling. No API key needed.
87 keyless tools of live, verifiable data for AI: weather, hazards, space, CVEs. Ed25519-signed.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
Draft cited RFP and security questionnaire answers from your knowledge base, with human review