Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Bawbel Scanner MCP server is a locally run integration for AI assistants that speak the Model Context Protocol. Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Bawbel MCP Server lets any MCP-compatible agent scan servers, check skill files, score conformance, manage justified suppressions, and query the AVE threat intelligence database mid-conversation.
Once Bawbel Scanner is connected, these are the calls the assistant has available:
scan_content — Scan raw text content for AVE vulnerabilitiesscan_server_card — Fetch and scan an MCP server-card before connectingscan_creds — Credential-focused scan (API keys, tokens, passwords, private keys)scan_chain — Delegation chain scan (unsafe sub-agent spawning and inherited permissions)check_conformance — Score a server manifest against the MCP spec (18 checks, A+ to F)accept_finding — Insert a justified suppression with reason, reviewer, and optional expirylookup_ave — Get a full AVE record by ID with remediation guidancesearch_ave — Search AVE records by keywordlist_ave — List all AVE records with optional severity/category filterscheck_pins — Detect rug pull drift in a directory of skill filesThe server ships on PyPI as bawbel-mcp, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
bawbel-scanner>=1.2.2 (installed automatically) - fastmcp>=3.0.0 (installed automatically) The bawbel CLI must be available in PATH. Installing bawbel-mcp installs bawbel-scanner which provides the bawbel CLI. ---Plenty of file and storage access servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Bawbel Scanner's toolset — scan_content, scan_server_card, scan_creds and 7 more — is a fair guide to whether it matches your workflow. It is maintained by bawbel; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Bawbel Scanner's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| scan_content | Scan raw text content for AVE vulnerabilities |
| scan_server_card | Fetch and scan an MCP server-card before connecting |
| scan_creds | Credential-focused scan (API keys, tokens, passwords, private keys) |
| scan_chain | Delegation chain scan (unsafe sub-agent spawning and inherited permissions) |
| check_conformance | Score a server manifest against the MCP spec (18 checks, A+ to F) |
| accept_finding | Insert a justified suppression with reason, reviewer, and optional expiry |
| lookup_ave | Get a full AVE record by ID with remediation guidance |
| search_ave | Search AVE records by keyword |
| list_ave | List all AVE records with optional severity/category filters |
| check_pins | Detect rug pull drift in a directory of skill files |
{
"mcpServers": {
"bawbel": {
"command": "uvx",
"args": ["bawbel-mcp"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
bawbel-scanner>=1.2.2 (installed automatically) - fastmcp>=3.0.0 (installed automatically) The bawbel CLI must be available in PATH. Installing bawbel-mcp installs bawbel-scanner which provides the bawbel CLI. ---Scoped local file access — read, write, search and reorganise files in directories you explicitly allow.
Search and read your Drive — Docs, Sheets and files become context your assistant can actually use.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Chat with your second brain — search, read and write vault notes through the Local REST API.
Connects AI models to an Obsidian knowledge base for direct access and manipulation of notes and folders.