Dredd MCP

Working · 1.8 s

io.github.pduggusa/dredd-mcpv1.2.0

Pre-flight verdict on MCP servers: known-bad identity, CVEs, dependency tree, tool drift. Signed.

Security

Source Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://analytics.dugganusa.com/api/v1/dredd/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

check_mcp_server Read-only

Pre-flight security verdict for an MCP server invocation. Judges BOTH server-level reputation AND the server's dependency graph (npm/pypi) against the DugganUSA threat-intel corpus (1.13M+ IOCs, Shai-Hulud + typosquat + LOLBin families). Returns BLOCK / ADVISORY / REVIEW / ALLOW with severity, evidence, dep-graph summary, and HMAC-signed response. REVIEW means we hold NO RECORD of this server -- not that it is safe. A brand-new attacker-published server also looks like this, so REVIEW calls for a look, not a pass. ALLOW is only returned when we actually resolved the server and scanned its dependency graph; known_to_us and dep_graph.scanned confirm it. Suited to a pre-flight check before a tool on another MCP server is used, especially one from outside the official MCP Registry.

serverstring, required

REQUIRED. The server to judge: its exact MCP Registry name (io.github.owner/server-name, optionally @version). A bare name (server-name) is judged as typed, never mapped to a registry server, and the matching full names come back in input.did_you_mean. Also resolved, only when the identity is provable: a registry URL (https://registry.modelcontextprotocol.io/v0/servers/<name>) and a GitHub repo ("owner/repo" or https://github.com/owner/repo) published by that owner as exactly one registry server. Package names (npm/PyPI), images and Smithery ids are recorded but judged as given (usually REVIEW): their name does not prove which code runs. Refused: commands, shell metacharacters, non-ASCII, local paths, endpoint URLs. No substring or fuzzy matching: anything we cannot resolve to exactly one server returns REVIEW, never a guess.

toolstring

Optional name of the specific tool being invoked

versionstring

Optional version of the MCP server (semver). A version inside `server` ([email protected]) is used when this is empty.

Tools (1)

Try it

Call this server's tools from your browser. Nothing to install.

https://analytics.dugganusa.com/api/v1/dredd/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

check_mcp_server Read-only

serverstring, required

toolstring

Optional name of the specific tool being invoked

versionstring

Optional version of the MCP server (semver). A version inside `server` ([email protected]) is used when this is empty.

Argument

Type

Description

tool

string

Optional name of the specific tool being invoked

server*

string

version

string

Optional version of the MCP server (semver). A version inside `server` ([email protected]) is used when this is empty.

{ "type": "object", "required": [ "server" ], "properties": { "tool": { "type": "string", "description": "Optional name of the specific tool being invoked" }, "server": { "type": "string", "minLength": 1, "description": "REQUIRED. The server to judge: its exact MCP Registry name (io.github.owner/server-name, optionally @version). A bare name (server-name) is judged as typed, never mapped to a registry server, and the matching full names come back in input.did_you_mean. Also resolved, only when the identity is provable: a registry URL (https://registry.modelcontextprotocol.io/v0/servers/<name>) and a GitHub repo (\"owner/repo\" or https://github.com/owner/repo) published by that owner as exactly one registry server. Package names (npm/PyPI), images and Smithery ids are recorded but judged as given (usually REVIEW): their name does not prove which code runs. Refused: commands, shell metacharacters, non-ASCII, local paths, endpoint URLs. No substring or fuzzy matching: anything we cannot resolve to exactly one server returns REVIEW, never a guess." }, "version": { "type": "string", "description": "Optional version of the MCP server (semver). A version inside `server` ([email protected]) is used when this is empty." } }, "additionalProperties": true }