Publisher · registry namespace · 27 servers
io.github.4hmetuyar
Every server in the official MCP registry whose name starts with io.github.4hmetuyar/. The registry ties a namespace to a verified GitHub account or domain: “only the legitimate owner of a GitHub account or domain can publish servers under that namespace” (registry documentation). The facts below are counted over all of them; they are not a rating of the publisher.
- Servers in the registry
- 27
- Where they run
- 27 local package
- Source repositories
- 27 open publicly
- Deprecated in the registry
- 0
- npm build provenance attested
- 5
- Opened by us in a read-only session
- 27
- In a same-tools group
- 11
- First version listed
- 2026-09-28
- Latest release
- 2026-10-02
Counted from the registry snapshot and our own checks; each server's page shows its facts with sources and dates. What a same-tools group is.
- io.github.4hmetuyar/a2a-auditorScans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposurelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/agent-graph-auditorFinds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/ai-code-scannerScans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injectionlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/compliance-checkerKVKK/GDPR/CCPA compliance checks for codebaseslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/db-gatewayKVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit loglocal packagedata-and-databases · AI-classifiedNo sessiontested 2026-10-09
- io.github.4hmetuyar/dependency-auditorCVE scanning for npm/pip/cargo dependencies via OSVlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/dns-intelligenceDNS record enumeration, misconfiguration and dangling-subdomain detectionlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/elicitation-auditorMCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/llm-redteamActive jailbreak/extraction/obfuscation red-teaming for live LLM endpointslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/mcp-config-auditorScans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquatslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/mcp-server-auditorScans MCP server tool definitions for excessive agency, injection sinks, hardcoded secretslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/memory-poisoning-scannerScans agent code for untrusted input poisoning persistent cross-session memorylocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/model-scannerScans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain riskslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/oauth-auditorScans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audiencelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/prompt-injection-scannerScans RAG content/scraped pages for indirect prompt injectionlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/prompt-leak-scannerCatches leaked credentials and PII in outbound LLM promptslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/rug-pull-detectorBaselines an MCP server's tools and detects tool-definition changes after approvallocal packagedeveloper-tools · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/secret-scannerScans files for leaked secrets and API keyslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/security-proxyMCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit loglocal packagesecurity · AI-classifiedNo sessiontested 2026-10-08
- io.github.4hmetuyar/security-suiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligencelocal packagesecurity · AI-classifiedNo sessiontested 2026-10-09
- io.github.4hmetuyar/slopsquat-scannerChecks declared npm/PyPI dependencies against real registries to catch slopsquattinglocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/ssl-inspectorTLS certificate/cipher/protocol inspectionlocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/tool-poisoning-scannerScans MCP tool definitions for hidden instructions and confused-deputy sinkslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/toxic-flow-auditorFinds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egresslocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-08
- io.github.4hmetuyar/unbounded-consumption-auditorScans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)local packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/vector-store-scannerProbes vector-database endpoints for unauthenticated exposure of embeddings/RAG datalocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09
- io.github.4hmetuyar/vulnerability-scannerTriggers GuardBee scans, queries findings, AI-assisted remediation guidancelocal packagesecurity · AI-classifiedNot probed (read-only run)tested 2026-10-09