Agent Guild MCP Server

Agent Guild is a sophisticated reputation system for AI agents with generally sound architectural security. The codebase demonstrates careful attention to cryptographic identity, credential verification, and state integrity. However, several moderate-severity concerns exist: custodial private key storage in the in-memory store without demonstrated encryption-at-rest, limited input validation on task metadata and evidence claims, and broad network access for agent probing without rate-limiting enforcement details. These issues are partially mitigated by the system's design intent (a trusted middleware service) but represent real risks if the service is compromised or misconfigured. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 1 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.