Tool Poisoning Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 640 installs a week from npm. Last commit 11 Oct 2026.
Scans MCP tool definitions for hidden instructions and confused-deputy sinks
Nothing serious here today
Today is the operative word: we check Tool Poisoning Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add tool-poisoning-scanner -- npx -y @guardbee/mcp-tool-poisoning-scanner{
"mcpServers": {
"tool-poisoning-scanner": {
"args": [
"-y",
"@guardbee/mcp-tool-poisoning-scanner"
],
"command": "npx"
}
}
}[mcp_servers.tool-poisoning-scanner]
command = "npx"
args = ["-y", "@guardbee/mcp-tool-poisoning-scanner"]{
"mcpServers": {
"tool-poisoning-scanner": {
"args": [
"-y",
"@guardbee/mcp-tool-poisoning-scanner"
],
"command": "npx"
}
}
}{
"mcpServers": {
"tool-poisoning-scanner": {
"args": [
"-y",
"@guardbee/mcp-tool-poisoning-scanner"
],
"command": "npx"
}
}
}Alternatives to Tool Poisoning Scanner
same job, measured the same wayScans MCP tool definitions for hidden instructions and confused-deputy sinks
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Score text and web pages for signs of AI writing; check images for hidden AI instructions.
Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
Security scanner for MCP servers - detects tool poisoning and injection
Memory for coding conventions and standing instructions that persists across sessions.
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Tool Poisoning Scanner — questions
Answers built from our own checks of this server.