← MCPLookup
Packageactivev0.5.1
io.github.caglarbozkurt/heimdall
io.github.caglarbozkurt/heimdall
Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.
No blockers found
assessed on 1 of 4 dimensions
- ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 5, 2026Pass
- MaintenanceRepository maintenance signals not yet ingested.Pending
- Manifest integrityLive manifest not yet captured — the rug-pull baseline begins at first probe.Pending
- Supply chainPackage vulnerability scan not yet run.Pending
- Behavioral trustNo live endpoint to observe.Not applicable
Connect
npm package
npx -y mcp-heimdall-scanProvenance
- Official MCP Registry · as of Jul 5, 2026 · registry-tos
Every verdict is attributable to its sources and recomputed from our own landed copy — never read live on this page.