Back to Browse

Garl MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

18 trust tools for AI agents — verify, score, route, compare, and delegate with confidence.

About

18 trust tools for AI agents — verify, score, route, compare, and delegate with confidence.

Security Report

4.2
Use Caution4.2High Risk

GARL Protocol's MCP server and backend demonstrate solid security fundamentals with proper cryptographic practices (ECDSA-secp256k1), input validation, and HTML/CSV injection mitigations. However, several moderate concerns exist: API key ownership verification uses SHA-256 hashes instead of secure comparison in some code paths, rate limiting relies on in-memory storage without persistence (vulnerable to restarts), and the code truncation prevents full analysis. The server's permissions (network_http, file_read for config, env_vars for secrets) are appropriate for its trust-verification purpose, but some validation gaps and error handling inconsistencies merit attention. Supply chain analysis found 14 known vulnerabilities in dependencies (2 critical, 4 high severity). Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 26 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

database

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Your GARL API key (get one via garl_register_agent tool or POST https://api.garl.ai/api/v1/agents/auto-register)Required

Environment variable: GARL_API_KEY

Your GARL agent UUID (returned on registration)Optional

Environment variable: GARL_AGENT_ID

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-garl-protocol-mcp-server": {
      "env": {
        "GARL_API_KEY": "your-garl-api-key-here",
        "GARL_AGENT_ID": "your-garl-agent-id-here"
      },
      "args": [
        "-y",
        "garl-frontend"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!