4hmetuyar MCP Servers
27 servers published under 4hmetuyar. 0 answered our last handshake, 0 did not, and between them they expose 0 tools.
27 servers 0 answering 0 not responding 1 125 installs/wk
DNS record enumeration, misconfiguration and dangling-subdomain detection
TLS certificate/cipher/protocol inspection
CVE scanning for npm/pip/cargo dependencies via OSV
Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats
Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs
Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints
Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks
KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log
Scans agent code for untrusted input poisoning persistent cross-session memory
KVKK/GDPR/CCPA compliance checks for codebases
Baselines an MCP server's tools and detects tool-definition changes after approval
Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
Checks declared npm/PyPI dependencies against real registries to catch slopsquatting
Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)
Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data
MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs
Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience
Scans RAG content/scraped pages for indirect prompt injection
Catches leaked credentials and PII in outbound LLM prompts
Scans files for leaked secrets and API keys
MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress