Context Oversharing Auditor

io.github.GuardBeePublished by GitHub account GuardBeev0.4.1Updated Nov 3, 2026

OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that scans agent and MCP source code for OWASP MCP10:2025 context-oversharing patterns and reports findings.

What you can do
  • Scan pasted source text for context-oversharing issues such as full conversation dumps, unscoped memory tools, shared session stores, prompt leaks and unfiltered vector queries
  • Scan a single file for the same checks
  • Recursively scan a whole directory of agent or MCP code
  • List every OWASP MCP10 check the auditor runs, with pattern names and severities
When to use it
Useful when you build or review MCP servers and AI agents and want a quick static check that handlers do not return more session, memory or system-prompt context than the current user or tenant should see. It complements, rather than replaces, a manual security review.
Requirements
Runs as a local stdio process, typically launched with npx from the npm package @guardbee/mcp-context-oversharing-auditor, so Node.js and network access for the package download are needed. No authentication, environment variables or headers are declared; telemetry is off unless GUARDBEE_TELEMETRY is set to 1.
Before you install
Scanned source code is passed to the tool, and if GUARDBEE_TELEMETRY=1 is set, the server, tool, success, duration and short parameter values such as file paths are sent to a third party, with longer strings and fields like content, token or password replaced by a placeholder. Findings are pattern-based and may miss real issues or flag false positives.

Installation

In SourceWeft

  1. Open Context Oversharing Auditor in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@guardbee/mcp-context-oversharing-auditor

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文 | 🇯🇵 日本語 | 🇰🇷 한국어 | 🇧🇷 Português | 🇪🇸 Español | 🇩🇪 Deutsch

[npm version] [npm downloads] [License: MIT]

An MCP server that audits agent/MCP source for OWASP MCP10:2025 — context oversharing.

toxic-flow-auditor grades whether a tool catalog can chain the lethal trifecta. This package asks a different MCP10 question: does a handler return more session, memory, or system context than the current user/tenant should see?

Telemetry is off by default. With GUARDBEE_TELEMETRY=1 it sends the server, tool, success, duration and short parameter values such as a file path; longer strings and fields like content, token or password are replaced with a placeholder. See @guardbee/mcp-telemetry.

What it flags

PatternSeverityMeaning
tool_dumps_full_conversationcriticalTool returns full messages / conversation history
unscoped_memory_recall_toolhighdump_memory / get_all_memories-style tools
shared_global_session_storehighGlobal session Map/dict without per-user keys
system_prompt_exposed_via_toolhighTool returns systemPrompt / developer instructions
cross_session_tool_result_reusemediumPrior tool results mixed into another session's context
vector_query_without_filterhighVector/RAG search with no tenant/user metadata filter

Quick start

json
{  "mcpServers": {    "guardbee-context-oversharing-auditor": {      "command": "npx",      "args": ["-y", "@guardbee/mcp-context-oversharing-auditor"]    }  }}
bash
npx @guardbee/mcp-context-oversharing-auditor scan ./src --format=sarif

Feedback

Questions, ideas, or a false positive? Start a thread in GitHub Discussions or open an issue. If GuardBee is useful to you, a ⭐ on the repository helps others find it.

Source: packages/context-oversharing-auditor/README.md at commit bc5997d

Tools

4

scan_text

Scan agent/MCP source for OWASP MCP10:2025 context oversharing — full conversation dumps, unscoped memory tools, shared global session stores, system-prompt leaks via tools, cross-session tool-result bleed, and unfiltered vector queries.

Parameterslabelcontentrequired

scan_file

Scan a single file for OWASP MCP10 context-oversharing issues

Parameterspathrequired

scan_directory

Recursively scan a directory for OWASP MCP10 context-oversharing issues

ParameterspathrequiredexcludeincludemaxFiles

list_patterns

List every OWASP MCP10 context-oversharing check this auditor runs

Takes no parameters.

Version history

4
  1. v0.4.1LatestOct 30, 2026
  2. v0.3.2Oct 22, 2026
  3. v0.2.2Oct 13, 2026
  4. v0.2.1Oct 9, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts