io.github.pduggusa/dredd-mcp

repo:https://github.com/pduggusa/dredd-mcp

Pre-flight MCP security. Blocks compromised deps + tool drift. HMAC-signed. Dredd judges.

transport:: remote
credential class:: self-provisionable
repo:: https://github.com/pduggusa/dredd-mcp

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

check_mcp_server
Pre-flight security verdict for an MCP server invocation. Judges BOTH server-level reputation AND the server's dependency graph (npm/pypi) against the DugganUSA threat-intel corpus (1.13M+ IOCs, Shai-Hulud + typosquat + LOLBin families). Returns BLOCK / ADVISORY / REVIEW / ALLOW with severity, evidence, dep-graph summary, and HMAC-signed response. REVIEW means we hold NO RECORD of this server -- not that it is safe. Treat REVIEW as do-not-proceed-blindly: a brand-new attacker-published server looks exactly like this. ALLOW is only returned when we actually resolved the server and scanned its dependency graph; check known_to_us and dep_graph.scanned to confirm. Use this BEFORE invoking any other MCP server tool, especially ones installed from outside the official MCP Registry.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/d43feefb-761a-4aaa-93b3-112a43405146/badge.svg)](https://vouch.tools/servers/d43feefb-761a-4aaa-93b3-112a43405146)