Dredd MCP
Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift.
Connector by pduggusa · GitHub account verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/pduggusa-dredd-mcp
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://analytics.dugganusa.com/api/v1/dredd/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 1 read · 0 write · 0 deleteRead-only
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 1
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 1 · Look things up without changing anything.
check_mcp_server
Network hosts it talks to 1
analytics.dugganusa.com· found in remote endpoint, install command
Tools (1)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
check_mcp_serverCheck an MCP serverread-onlyPre-flight security verdict for an MCP server invocation. Judges BOTH server-level reputation AND the server's dependency graph (npm/pypi) against the DugganUSA threat-intel corpus (1.13M+ IOCs, Shai-Hulud + typosquat + LOLBin families). Returns BLOCK / ADVISORY / REVIEW / ALLOW with severity, evidence, dep-graph summary, and HMAC-signed response. REVIEW means we hold NO RECORD of this server -- not that it is safe. A brand-new attacker-published server also looks like this, so REVIEW calls for a look, not a pass. ALLOW is only returned when we actually resolved the server and scanned its depe…
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 23, 2026 (5 days ago)
- Last release
- Oct 20, 2026 (8 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
io.github.pduggusa/dredd-mcp- Version
- 1.2.0
- Auth
- Auth not stated
- License
- MIT
- Repository
- github.com/pduggusa/dredd-mcp
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
More from pduggusa
- 0.624score
DugganUSA CLI — Local STDIO MCP
pduggusa
Local STDIO MCP for DugganUSA threat intel.
ConnectorAFreshness: ALocal★ 2Claude Code +5 - 0.578score
Jeevesus — DugganUSA threat-intel MCP
pduggusa
Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
ConnectorAFreshness: ARemoteRead-onlyClaude Code +3
Cite this page
Dredd MCP. Agent Mart. https://agentmart.dev/connectors/pduggusa-dredd-mcp (last updated 2026-10-24)