Agent Guild MCP Server

Agent Guild is a sophisticated reputation/trust system for AI agents with legitimate use of cryptography, HTTP networking, and credential management. The codebase demonstrates good architectural discipline with attention to security concerns (canonical write protection, transaction safety, evidence weighting). However, several moderate security concerns exist: sensitive data (private keys, API credentials) stored in memory without clear encryption, broad environment variable access, logging that could expose sensitive material, and incomplete input validation on user-supplied metadata. The permissions are appropriate for the stated purpose (reputation network, payment processing, agent coordination), but key handling practices need hardening. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 1 high severity).

4 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.