MCP security checks — WARDEN and HISTOR
Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens.
Connector by modelmarket.dev · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/modelmarket-dev-mcp-security
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://modelmarket.dev/tools/mcp/securityRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 4 read · 0 write · 0 deleteRead-only
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 4
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 4 · Look things up without changing anything.
histor_checktool_list_costwarden_scanx402_check
Network hosts it talks to 1
modelmarket.dev· found in remote endpoint, install command
Tools (4)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
histor_checkServer history (HISTOR)read-onlyLook up an MCP server in HISTOR, a public append-only log of MCP tool sets: when its tool set was first pinned, how often it changed, and what the pattern scan found. HISTOR answers from its own observations and never contacts the server.
tool_list_costTool list token costread-onlyHow many tokens an MCP server's tool list adds to every model request, what that costs per 1,000 requests, the heaviest tools, and where it sits among 18,204 packages and 16,170 remote servers. Send a tools/list or name a server HISTOR observes.
warden_scanScan tool definitions (WARDEN)read-onlyScan an MCP server's tools/list with WARDEN, the open-source MCP firewall: static rules and a threat list over every name, description, schema and annotation. Returns allow or block and each finding with its rule and severity. Quoted fragments of the scanned text are left out of the answer.
x402_checkx402 payment checkread-onlyCheck a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's terms, and when the signature fails names the domain it was really made for (e.g. Base Sepolia's 'USDC' used on Base, where USDC is 'USD Coin').
Compare and alternatives
Featured in
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 23, 2026 (5 days ago)
- Last release
- Oct 21, 2026 (7 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
dev.modelmarket/mcp-security- Version
- 1.0.0
- Auth
- Auth not stated
- License
- MIT
- Repository
- github.com/alexar76/warden
- Website
- modelmarket.dev/tools/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from modelmarket.dev
- 0.609score
Live weather and air quality (GAIA)
modelmarket.dev
Weather, air quality and nearest live sensors anywhere, each with a signed receipt.
ConnectorAFreshness: ARemoteRead-only★ 1Claude Code +3 - 0.586score
EMPORION — business facts from public registers
modelmarket.dev
EU VAT and EORI checks, sanctions screening, company and LEI lookup, ECB rates.
ConnectorAFreshness: ARemoteRead-onlyClaude Code +3 - 0.586score
Domain availability and quotes (demo)
modelmarket.dev
Is a.com/.net/.org name free, and a signed one-year quote.
ConnectorAFreshness: ARemoteRead-onlyClaude Code +3
Cite this page
MCP security checks — WARDEN and HISTOR. Agent Mart. https://agentmart.dev/connectors/modelmarket-dev-mcp-security (last updated 2026-10-24)