Toxic Flow Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 1 490 installs a week from npm. Last commit 11 Oct 2026.
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
Today is the operative word: we check Toxic Flow Auditor every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add toxic-flow-auditor -- npx -y @guardbee/mcp-toxic-flow-auditor
{
"mcpServers": {
"toxic-flow-auditor": {
"args": [
"-y",
"@guardbee/mcp-toxic-flow-auditor"
],
"command": "npx"
}
}
}
[mcp_servers.toxic-flow-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-toxic-flow-auditor"]
{
"mcpServers": {
"toxic-flow-auditor": {
"args": [
"-y",
"@guardbee/mcp-toxic-flow-auditor"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"toxic-flow-auditor": {
"args": [
"-y",
"@guardbee/mcp-toxic-flow-auditor"
],
"command": "npx"
}
}
}
Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress
Real SEC, 13F, insider, congress & macro data your AI agent can cite. Hosted MCP, 24 tools.
An MCP server that provides access to trusted data about business identity and activity
Live Ethereum whale flows: token activity, top tokens, latest moves, Whale Sentiment Index.
Agent-native commerce with trusted catalog, durable carts, and Stripe Checkout via MCP and UCP.
MCP tools for UVM/cocotb logs, coverage, regressions, and waveform triage.
Agent-facing lodging decision tool. Non-sensitive categories only. Alpha, unauthenticated.
Local catalog of MateMatic Boutique: find a legal-data connector or skill, install locally.
Answers built from our own checks of this server.