Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Bawbel MCP Server lets any MCP-compatible agent scan servers, check skill files, score conformance, manage justified suppressions, and query the AVE threat intelligence database mid-conversation.
Once Bawbel Scanner is connected, these are the calls the assistant has available:
scan_content — Scan raw text content for AVE vulnerabilitiesscan_server_card — Fetch and scan an MCP server-card before connectingscan_creds — Credential-focused scan (API keys, tokens, passwords, private keys)scan_chain — Delegation chain scan (unsafe sub-agent spawning and inherited permissions)check_conformance — Score a server manifest against the MCP spec (18 checks, A+ to F)accept_finding — Insert a justified suppression with reason, reviewer, and optional expirylookup_ave — Get a full AVE record by ID with remediation guidancesearch_ave — Search AVE records by keywordlist_ave — List all AVE records with optional severity/category filterscheck_pins — Detect rug pull drift in a directory of skill filesbawbel-scanner>=1.2.2 (installed automatically) - fastmcp>=3.0.0 (installed automatically) The bawbel CLI must be available in PATH. Installing bawbel-mcp installs bawbel-scanner which provides the bawbel CLI. ---Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| scan_content | Scan raw text content for AVE vulnerabilities |
| scan_server_card | Fetch and scan an MCP server-card before connecting |
| scan_creds | Credential-focused scan (API keys, tokens, passwords, private keys) |
| scan_chain | Delegation chain scan (unsafe sub-agent spawning and inherited permissions) |
| check_conformance | Score a server manifest against the MCP spec (18 checks, A+ to F) |
| accept_finding | Insert a justified suppression with reason, reviewer, and optional expiry |
| lookup_ave | Get a full AVE record by ID with remediation guidance |
| search_ave | Search AVE records by keyword |
| list_ave | List all AVE records with optional severity/category filters |
| check_pins | Detect rug pull drift in a directory of skill files |
{
"mcpServers": {
"bawbel": {
"command": "uvx",
"args": ["bawbel-mcp"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
bawbel-scanner>=1.2.2 (installed automatically) - fastmcp>=3.0.0 (installed automatically) The bawbel CLI must be available in PATH. Installing bawbel-mcp installs bawbel-scanner which provides the bawbel CLI. ---Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Search and read your Drive — Docs, Sheets and files become context your assistant can actually use.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Chat with your second brain — search, read and write vault notes through the Local REST API.
Manage Proxmox hypervisors through a Model Context Protocol server, providing a clean interface for nodes, VMs, and containers.