← Index

io.github.soufianetahiri/mception

io.github.soufianetahiri/mception·v0.5.2·Security

Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
MCEPTION_DATA_DIR

Where audit reports and rug-pull baselines live. Defaults to ~/.mception.

MCEPTION_OFFLINE

Set to 1 to block outbound HTTP (OSV, registry signals, phantom-repo probes).

MCEPTION_INTROSPECT_TIMEOUT

Per-target timeout in seconds for the fetcher + engine pipeline.

MCEPTION_ENABLE_LLM_JUDGE

Set to 1 to enable advisory LLM-assisted classification via MCP sampling. No API key needed.

MCP quality score · maturity, not trust · methodology
freshness
24
completeness
5
installability
25
documentation
10
stability
5
Alternatives in Security