mcpbeat Sign in

Toxic Flow Auditor MCP Server

local only

Toxic Flow Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 1 490 installs a week from npm. Last commit 11 Oct 2026.

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

Installs per day peak 1 088 · avg 79 · +101% w/w
a month agotoday
1 490
Installs / week
npm · @guardbee/mcp-toxic-flow-auditor
1
Stars
0 open issues
11 Oct 2026
Last commit
16 releases in 90 days
—
License
TypeScript

Nothing serious here today

Today is the operative word: we check Toxic Flow Auditor every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add toxic-flow-auditor -- npx -y @guardbee/mcp-toxic-flow-auditor
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "toxic-flow-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-toxic-flow-auditor"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.toxic-flow-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-toxic-flow-auditor"]
.cursor/mcp.json
{
  "mcpServers": {
    "toxic-flow-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-toxic-flow-auditor"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "toxic-flow-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-toxic-flow-auditor"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Toxic Flow Auditor

same job, measured the same way
Toxic Flow Auditor
by 4hmetuyar

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

local only
Ko MCP
by sharplu

Real SEC, 13F, insider, congress & macro data your AI agent can cite. Hosted MCP, 24 tools.

30 tools answering
Enigma MCP Server
by enigma

An MCP server that provides access to trusted data about business identity and activity

answering
Deep Blue Alpha — Ethereum Whale Data
by deepbluealpha

Live Ethereum whale flows: token activity, top tokens, latest moves, Whale Sentiment Index.

answering
VibeCart
by runjohnray2-lgtm

Agent-native commerce with trusted catalog, durable carts, and Stripe Checkout via MCP and UCP.

4 tools answering
Sentinel DV
by kiranreddi

MCP tools for UVM/cocotb logs, coverage, regressions, and waveform triage.

87 installs/wk local only
Lodging Decision
by scenicstay

Agent-facing lodging decision tool. Non-sensitive categories only. Alpha, unauthenticated.

1 tools answering
Boutique MCP
by matematicsolutions

Local catalog of MateMatic Boutique: find a legal-data connector or skill, install locally.

174 installs/wk local only

Toxic Flow Auditor — questions

Answers built from our own checks of this server.

Why is there no uptime for Toxic Flow Auditor?
Toxic Flow Auditor runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-toxic-flow-auditor was installed 1 490 times last week.
How do I connect Toxic Flow Auditor?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @guardbee/mcp-toxic-flow-auditor straight from npm; nothing to host, nothing to sign up for.
How many people use Toxic Flow Auditor?
The npm package @guardbee/mcp-toxic-flow-auditor was installed 1 490 times in the last week. Week over week that is +101%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Toxic Flow Auditor open source?
We cannot say either way: written in TypeScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.