agentmods.dev

WRG-11/mcp-objauthz-lab

Vulnerable-by-design MCP server for learning object-level / cross-tenant authorization (BOLA/IDOR) bugs, plus Semgrep rules that find the same shapes in JavaScript/TypeScript, Python, Go, Rust, Java, Kotlin, C#, PHP, Ruby and Swift MCP servers - shipped as a GitHub Action with SARIF output.

Open on GitHub
0Stars on the repository
1Mods indexed here, across every type
2d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Sort RelevanceRecently updatedFewest tokensSecurity gradeRepo starsStars this weekTop rated 1 mods

mcp-audit

01

WRG-11/mcp-objauthz-lab

Skill Claude CodeCodex

Audit the tool surface of an MCP server for discoverability, return-shape and naming consistency, error handling, test coverage, decay, state handling and, on multi-tenant servers, object-level authorization. Produces one evidence-only Markdown report that ends in a short list of named fixes of an hour or less and a…

not rated 0 2d ago A 169 tokens original MIT