Servers by 4hmetuyar

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Baselines an MCP server's tools and detects tool-definition changes after approval

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats