Is mcp-guardian safe to use?

mcp-guardian has no known vulnerabilities on the latest version (2.4.0). DepScope rates its health at 54/100 (high risk).

What is the latest version of mcp-guardian?

The latest version of mcp-guardian is 2.4.0, released 2026-02-17.

Does mcp-guardian have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-guardian.

Is mcp-guardian deprecated?

No, mcp-guardian is actively maintained. Latest release: 2.4.0 (2026-02-17).

What are alternatives to mcp-guardian?

Popular alternatives to mcp-guardian in npm include: ?, debug, ansi-styles, brace-expansion, semver.

What license does mcp-guardian use?

mcp-guardian is licensed under MIT.

mcp-guardian

npmv2.4.0

MCP security scanner - detect prompt injection in tool descriptions

License MITpermissive20 versions1 maintainers3 deps264 weekly dl

alexandriashai/mcp-guardian

/ 100

Health

use with caution

[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@modelcontextprotocol/sdk ora zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-guardian