Bawbel Mcp
by bawbelcommunityv1.1.0
1
An MCP server that exposes Bawbel security-scanning functions for MCP servers and agentic AI components. It can scan raw content and server cards, check MCP spec conformance, look up and search AVE threat records, and detect drift in skill file pins.
From the registry: Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Install & configure
Prerequisites
- requiredInstall Python 3.10+Python 3.10 or newer is required to run bawbel-mcp.
- requiredInstall bawbel-mcpInstall the MCP server package. Installing bawbel-mcp also installs bawbel-scanner, which provides the required bawbel CLI in PATH. Optionally install the [all] extras to include all detection engines.
https://pypi.org/project/bawbel-mcp/$ pip install bawbel-mcp
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `bawbel-mcp` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install Python 3.10+** — Python 3.10 or newer is required to run bawbel-mcp.
- **Install bawbel-mcp** — Install the MCP server package. Installing bawbel-mcp also installs bawbel-scanner, which provides the required bawbel CLI in PATH. Optionally install the [all] extras to include all detection engines. Run: `pip install bawbel-mcp` (https://pypi.org/project/bawbel-mcp/)
Canonical MCP server config (stdio transport):
- command: `uvx`
- args: ["bawbel-mcp"]
Note: The README shows stdio usage via uvx as the simplest portable MCP config. It also documents remote deployment with streamable HTTP using: uvx bawbel-mcp --transport streamable-http --host 0.0.0.0 --port 8000, but no canonical client-side HTTP URL example is provided. No environment variables are documented.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Note: The README shows stdio usage via uvx as the simplest portable MCP config. It also documents remote deployment with streamable HTTP using: uvx bawbel-mcp --transport streamable-http --host 0.0.0.0 --port 8000, but no canonical client-side HTTP URL example is provided. No environment variables are documented.
Tools (7)
scan_content
Scan raw text content for AVE vulnerabilities
scan_server_card
Fetch and scan an MCP server card before connecting
check_conformance
Score a server manifest against the MCP spec
lookup_ave
Get a full AVE record by ID with remediation guidance
search_ave
Search AVE records by keyword
list_ave
List all AVE records with optional severity or category filters
check_pins
Detect rug pull drift in a directory of skill files
Prerequisites
- • Python 3.10+
Packages
bawbel-mcp
pypiv1.1.0transport: stdio
Details
- Language
- Python
- License
- Apache-2.0
- Released
- May 23, 2026
- Last commit
- May 23, 2026
- Registry name
- io.github.bawbel/bawbel-mcp