BackBond Agent Scan MCP server

by BackBond·io.github.BackBond/agent-scan·v0.6.3

Vet MCP tool manifests before attachment; returns block, review, or no blocking finding.

A91/100grade A

What users say

No reviews yet

Safety scan

A91/100

Adoption

Growing

0 stars173 downloads/wk

Reviews

Nobody has reviewed BackBond Agent Scan yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

scan_my_runtime
Statically scans a supplied live tool manifest, or bounded local agent config discovery when omitted. …; no network requests or tool execution.
tool_name
What the tool does
vet_tools_before_attachwrite action
Runs a scoped static pre-attachment gate over a proposed live tool list. Returns block, review, or no_blocking_finding; never a runtime safety determination.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan22 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 1 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @backbond/agent-scan on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add agent-scan -- npx -y @backbond/agent-scan

Is BackBond Agent Scan MCP server safe?: Yes, by our scan: it is graded A (91/100). Read the BackBond Agent Scan safety report
How do I install BackBond Agent Scan?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does BackBond Agent Scan need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is BackBond Agent Scan maintained?: The last commit was 3 days ago (2026-09-18). The latest release is v0.6.3.
What can I use instead of BackBond Agent Scan?: Servers from other publishers that do the same job: MCP server, Skillsmith MCP server and GitWarren MCP server. Compare all BackBond Agent Scan alternatives.

Same job from other publishers: the closest match first, then the best rated.

MCP
Authorize consequential AI agent actions before execution
not reviewed
Established
A
Skillsmith
Share agent skills across your team, scan them for risk, and track what's actually used.
not reviewed
Established
B
GitWarren
Code review on your own machine, for you and your coding agent. Nothing leaves your computer.
not reviewed
Established
A
Projectmem
Coding agent memory — one local MCP server for every project. Warns before repeating failed fixes.
not reviewed
Growing
A
Ios Agent Skill
Swift reviews, local Apple references, app scaffolding and iOS simulator workflows.
not reviewed
Growing
A