Toxic Flow Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 11 Oct 2026.
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
What the code does
We read the source, 5 h ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const result = spawnSync(process.execPath, [cliPath, entry.cmd, ...args], {
pattern: /\b(?:read|cat|include|attach|append)\b[^.]{0,80}(?:\.ssh\b|\bid_rsa\b|\.env\b|\.aws[\\/]credentials\b|\bprivate[\s_-]?key\b|\.npmrc\b)/i,
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to Toxic Flow Auditor
same job, measured the same wayFinds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
Real SEC, 13F, insider, congress & macro data your AI agent can cite. Hosted MCP, 24 tools.
An MCP server that provides access to trusted data about business identity and activity
Live Ethereum whale flows: token activity, top tokens, latest moves, Whale Sentiment Index.
Agent-native commerce with trusted catalog, durable carts, and Stripe Checkout via MCP and UCP.
MCP tools for UVM/cocotb logs, coverage, regressions, and waveform triage.
Agent-facing lodging decision tool. Non-sensitive categories only. Alpha, unauthenticated.
Local catalog of MateMatic Boutique: find a legal-data connector or skill, install locally.
Toxic Flow Auditor — questions
Answers built from our own checks of this server.