Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
CallLint is a pre-flight risk linter for MCP and agent-tool configs. It checks the blast radius before the tool runs: what each tool can read, write, execute, connect to, send, or mutate — then returns an evidence-backed verdict (SAFE / REVIEW / BLOCK / UNKNOWN) before your agent ever loads the server.
An agent's power is the union of its tools' permissions. A single MCP server can add filesystem write, shell execution, network egress, or model-directed instructions to an autonomous agent — usually described only by untrusted, tool-provided metadata. CallLint inspects that surface statically and tells you, with evidence, what you would be granting before you grant it.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| prompt.poisoning | model-directed instructions in tool metadata (blocker) |
| prompt.hidden-instructions | hidden/obfuscated content (zero-width, bidi, |
| prompt.surface-instructions | model-directed or hidden content in a project |
| exec.dangerous-command | shell-out / interpreter / package-runner commands |
| exec.unverified-local-source | runs a local script/binary that is not a |
| files.broad-path | over-broad filesystem grants, incl. docker bind-mount host |
| supply.unpinned-package | unpinned package specs (rug-pull surface) |
| secretEnvKeys | 🔐 Secrets |
| broadFilesystemPath | 📁 Files |
| unknownRemote | 🌐 Network |
| promptPoisoning | 🧠 Prompt |
{
"mcpServers": {
"calllint": {
"command": "npx",
"args": ["-y", "calllint"]
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
TypeScript SDK for the MadeOnSol Robinhood Chain (chain id 4663) API — EVM-native KOL trades, the DEX trade tape, token discovery/bundles/candles
MasterGo MCP standalone service
Lossless skim-then-expand reading of big files, repos, and command output with far fewer tokens
Professional skip tracing demo built with 6-server MCP stack - Locate individuals and gather contact information with AI-powered confidence scoring