MCP HeartbeatTHE MCP OBSERVATORY
Public workspace

Explore

Evidence for your next connection.

Independent measurements of remote MCP servers. Every observation has a timestamp.

Read-only probes

Publisher portfolio

4hmetuyar

Explore the MCP servers published by 4hmetuyar, with independent connection checks, performance measurements, and setup instructions for each project.

Listed servers
27

Active projects in this portfolio. Deleted and deprecated registry rows are excluded.

Sampled servers
0

Active servers with a recorded connection probe

Latest probe connected
0

Latest stored probe connected. This is not a live guarantee.

Repositories
1

Distinct source repositories linked by the active listings

Portfolio overview

MCP servers

Compare connection status and measurements. Open a server for its tools, check results, and client configuration.

Dated server measurements. The status describes the last probe or a listed authentication requirement. Checks that have not been measured are not failures. Open a server to inspect the evidence.
Server / capabilityLast probeMedian latencyChecks passedLast checked
io.github.4hmetuyar/a2a-auditor

Scans Agent2Agent (A2A) protocol code for webhook SSRF, missing auth, and credential exposure

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/vector-store-scanner

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

Developer ToolsAI / LLM tooling

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/dns-intelligence

DNS record enumeration, misconfiguration and dangling-subdomain detection

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/elicitation-auditor

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/mcp-server-auditor

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/slopsquat-scanner

Checks declared npm/PyPI dependencies against real registries to catch slopsquatting

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/agent-graph-auditor

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/llm-redteam

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/model-scanner

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/security-proxy

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/db-gateway

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

Developer ToolsDatabase

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/mcp-config-auditor

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/tool-poisoning-scanner

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/ai-code-scanner

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/dependency-auditor

CVE scanning for npm/pip/cargo dependencies via OSV

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/memory-poisoning-scanner

Scans agent code for untrusted input poisoning persistent cross-session memory

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/oauth-auditor

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/prompt-injection-scanner

Scans RAG content/scraped pages for indirect prompt injection

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/prompt-leak-scanner

Catches leaked credentials and PII in outbound LLM prompts

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/rug-pull-detector

Baselines an MCP server's tools and detects tool-definition changes after approval

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/security-suite

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/toxic-flow-auditor

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

Developer ToolsCode & DevOps

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/unbounded-consumption-auditor

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

Finance & CryptoPayments & trading

Not measuredNot measured3 / 6Not checked yet
io.github.4hmetuyar/vulnerability-scanner

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

SecurityCode & DevOps

Not measuredNot measured3 / 6Not checked yet

Company & identity

About 4hmetuyar

4hmetuyar publishes MCP servers under the io.github.4hmetuyar namespace. This namespace is associated with a GitHub login in the MCP Registry.

This publisher’s namespace has not been verified. Follow the publisher’s own links to learn more about the company and its projects.

Source repositories