mcpbeat Sign in

Gadriel AI Security Harness MCP Server

by gadriel-ai Your server? Claim it
local only

Gadriel AI Security Harness runs on your own machine — the client starts it, so there is no endpoint to ping. 199 installs a week from npm. Last commit 17 Sep 2026.

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

Installs per day peak 139 · avg 10 · +340% w/w
a month agotoday
199
Installs / week
npm · gadriel
0
Stars
0 open issues
17 Sep 2026
Last commit
0 releases in 90 days
unlicensed (all rights reserved)
License
language unknown

What the code does

We read the source, 13 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] bin/gadriel.cjs:1
этот файл ставится пользователю, но в репозитории его нет
Package points at a different repository gadriel-ai/gadriel-copilot-plugin
пакет gadriel ссылается на gadriel-ai/preflight
Runs an external command [пакет] bin/gadriel.cjs:139
var result = spawnSync(binPath, process.argv.slice(2), {
Builds a file path from a variable [пакет] bin/gadriel.cjs:84
var binPath = path.join(pkgRoot, "bin", "gadriel" + target.ext);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add gadriel -- npx -y gadriel
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "gadriel": {
      "args": [
        "-y",
        "gadriel"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.gadriel]
command = "npx"
args = ["-y", "gadriel"]
.cursor/mcp.json
{
  "mcpServers": {
    "gadriel": {
      "args": [
        "-y",
        "gadriel"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "gadriel": {
      "args": [
        "-y",
        "gadriel"
      ],
      "command": "npx"
    }
  }
}

This one needs environment variables set before it will start: GADRIEL_NO_ANONYMOUS_AUTH (Set to 1 to skip anonymous device registration with app.gadriel.ai.). The author declared them in the registry entry; get the values from the project itself.

Alternatives to Gadriel AI Security Harness

same job, measured the same way
MCP Codeaudit
by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

24 installs/wk local only
Feldspar free repository security scan
by project-feldspar

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

2 tools answering
Skarn
by getskarn

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

281 installs/wk local only
Aegis
by verrysimatupang99

Charter-bound defensive security copilot: secrets, obfuscation, deps, Dockerfile, IaC scans.

70 installs/wk local only
TridentChain Security
by devinder1

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

134 installs/wk local only
GuardianShield
by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

82 installs/wk local only
middleBrick
by middlebrick

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

28 installs/wk local only
MCP ZAP Server
by dtkmn

Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.

local only

Gadriel AI Security Harness — questions

Answers built from our own checks of this server.

Why is there no uptime for Gadriel AI Security Harness?
Gadriel AI Security Harness runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package gadriel was installed 199 times last week.
How do I connect Gadriel AI Security Harness?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls gadriel straight from npm; nothing to host, nothing to sign up for.
How many people use Gadriel AI Security Harness?
The npm package gadriel was installed 199 times in the last week. Week over week that is +340%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Gadriel AI Security Harness open source?
No, and the distinction matters: its licence is declared as unlicensed (all rights reserved). That makes it source-available — you can read the code, but the terms are the author's own, not one of the recognised open-source licences. Read them before you build on it.