Data · Local MCP server
Toxic Flow Auditor
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress.
What the MCP Registry states
The entry as published to the official MCP Registry (read 2026-10-04), latest version.
- Registry name
io.github.4hmetuyar/toxic-flow-auditor- Version
- 0.1.4
- Status
- Active
- Category
- data
- Transport
- stdio (local process)
- Package
- npm
- Published
- 2026-10-02
- Updated
- 2026-10-02
- Publisher
- 4hmetuyar (GitHub) · 26 servers with pages here
- Repository
- github.com/GuardBee/guardbee-mcp (folder packages/toxic-flow-auditor)
- Source
- Registry API entry
Packages
| Registry | Package | Version | Transport |
|---|---|---|---|
| npm | @guardbee/mcp-toxic-flow-auditor | 0.1.4 | stdio |
How to connect Toxic Flow Auditor
Toxic Flow Auditor runs locally from a Node.js package published to the npm registry: @guardbee/mcp-toxic-flow-auditor version 0.1.4. It speaks MCP over stdio, so the client starts it as a program and talks to it through standard input and output. It needs Node.js; clients usually start it with npx — the usual command is npx -y @guardbee/mcp-toxic-flow-auditor@0.1.4.
In the mcpServers JSON format that many desktop and editor MCP clients read, the entry looks like this (placeholders in angle brackets):
{
"mcpServers": {
"toxic-flow-auditor": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-toxic-flow-auditor@0.1.4"
]
}
}
}Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect
More from 4hmetuyar (GitHub)
| Server | Runs |
|---|---|
| Oauth AuditorScans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience. | Local · stdio |
| Prompt Injection ScannerScans RAG content/scraped pages for indirect prompt injection. | Local · stdio |
| Prompt Leak ScannerCatches leaked credentials and PII in outbound LLM prompts. | Local · stdio |
| Rug Pull DetectorBaselines an MCP server's tools and detects tool-definition changes after approval. | Local · stdio |
| Secret ScannerScans files for leaked secrets and API keys. | Local · stdio |
| Security ProxyMCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log. | Local · stdio |
| Security SuiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence. | Local · stdio |
| Slopsquat ScannerChecks declared npm/PyPI dependencies against real registries to catch slopsquatting. | Local · stdio |
| Tool Poisoning ScannerScans MCP tool definitions for hidden instructions and confused-deputy sinks. | Local · stdio |
| Unbounded Consumption AuditorScans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6) | Local · stdio |
| Vector Store ScannerProbes vector-database endpoints for unauthenticated exposure of embeddings/RAG data. | Local · stdio |
| Vulnerability ScannerTriggers GuardBee scans, queries findings, AI-assisted remediation guidance. | Local · stdio |
More data servers
| Server | Runs |
|---|---|
| TOP GUN GEO-LensBrand visibility auditing across LLMs, AI search, and answer engines with GEO reports and scores. | Remote · HTTP |
| Torah MCPKeyless Torah study via Sefaria: weekly portion, Tanakh text, commentaries, links, search. | Local · stdio |
| Toronto Tech Week 2026 EventsSearch 500+ Toronto Tech Week 2026 events by date, theme, audience, format, and neighborhood. | Remote · HTTP |
| Tournride — Camino de Santiago bike rentalReal-time bike rental availability, exact prices and route knowledge for the Camino de Santiago. | Remote · HTTP |
| Tracetify MCPFind competitors, trace how they grew, watch what they ship — plus your Search Console. | Remote & Local · HTTP, stdio |
| Trade IntelTrade Intel MCP — Compound tools that chain Comtrade, Census, Treasury,. | Remote · HTTP |
| Trade Tariffs MCPUS import tariff lookup against the official USITC Harmonized Tariff Schedule. | Remote · HTTP |
| TradeDataHubContractor dataset discovery, masked previews, pricing, and production API plans from $39/month. | Remote · HTTP |