MCP security checks — WARDEN and HISTOR MCP Server

by modelmarket Your server? Claim it

answering

MCP security checks — WARDEN and HISTOR is answering right now. Last checked 1 min ago. It exposes 4 tools. Last commit 24 Oct 2026.

Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

Uptime history 5 days of history

5 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

422 ms

Response time

average over 24h

Stars

last commit 24 Oct 2026

What the code does

We read the source, 18 h ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command src/mcp-client.ts:71, src/wrap.ts:345

  const child = spawn(ref.command, ref.args ?? [], {

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 1 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-security --transport http https://modelmarket.dev/tools/mcp/security

Settings → Connectors → Add custom connector, then paste this address

https://modelmarket.dev/tools/mcp/security

~/.codex/config.toml

[mcp_servers.mcp-security]
url = "https://modelmarket.dev/tools/mcp/security"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-security": {
      "url": "https://modelmarket.dev/tools/mcp/security"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp-security": {
      "type": "http",
      "url": "https://modelmarket.dev/tools/mcp/security"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

histor

histor_check

Look up an MCP server in HISTOR, a public append-only log of MCP tool sets: when its tool set was first pinned, how often it changed, and what the pattern scan found. HISTOR answers from its own observations and never contacts the server.

tool

tool_list_cost

How many tokens an MCP server's tool list adds to every model request, what that costs per 1,000 requests, the heaviest tools, and where it sits among 18,204 packages and 16,170 remote servers. Send a tools/list or name a server HISTOR observes.

warden

warden_scan

Scan an MCP server's tools/list with WARDEN, the open-source MCP firewall: static rules and a threat list over every name, description, schema and annotation. Returns allow or block and each finding with its rule and severity. Quoted fragments of the scanned text are left out of the answer.

x402

x402_check

Check a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's terms, and when the signature fails names the domain it was really made for (e.g. Base Sepolia's 'USDC' used on Base, where USDC is 'USD Coin').

Endpoints

URL	Transport	State	Latency	Checked
https://modelmarket.dev/tools/mcp/security	streamable-http	answering	416 ms	1 min ago

Alternatives to MCP security checks — WARDEN and HISTOR

same job, measured the same way

Mcpshield

by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

22 installs/wk local only

Mcpcheck

by joeyough

Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.

2 tools answering

AIShield Security Scanner

by lm203688

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

52 installs/wk 10 tools local only

MCP Safeguard

by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

571 installs/wk local only

Palanit Core

by stasxr

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

729 installs/wk local only

MCP Security Guard

by petrovicistefan

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

70 installs/wk local only

Secureflows MCP Server

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

Secureflows MCP

by michal-lefler

MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.

18 tools answering

MCP security checks — WARDEN and HISTOR — questions

Answers built from our own checks of this server.

What can MCP security checks — WARDEN and HISTOR do?

It exposes 4 tools, read directly from the server on our last check. Among them: histor_check, tool_list_cost, warden_scan, x402_check. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is MCP security checks — WARDEN and HISTOR working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 422 ms. The bar chart above shows every period we have measured.

How do I connect MCP security checks — WARDEN and HISTOR?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does MCP security checks — WARDEN and HISTOR need an API key?

No. MCP security checks — WARDEN and HISTOR completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is MCP security checks — WARDEN and HISTOR?

It answers our handshake in 422 ms on average, which is faster than 30% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is MCP security checks — WARDEN and HISTOR open source?

The code is open source: it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at modelmarket.dev, which runs on its operator's own terms.