Preflight scans MCP servers before your agent connects, flags exposed tool lists
atp_studio_coll · reddit · 2026-10-10
Citing that an audit found over half of public MCP servers abandoned and a Censys scan found thousands exposed with no access controls, the author built Preflight — a check that runs before your agent connects to any MCP server. It is itself an MCP server an agent can call first; free tier needs no signup.
It inspects four things in a tool manifest:
- whether input schemas really constrain scope (a "read a file" tool accepting any path is a filesystem reader)
- whether the tool list is served with no credentials
- whether it matches documented supply-chain incidents
- (paid tier) whether tool descriptions contain phrasing written for the model rather than the deployer
More from coding & agent
- Decisions API hits GA as agents automate cloud video editing via feedback loops — dkundel · 2026-10-23
- A curated library of 50+ free AI agent resources: videos, repos, one Google Doc — ifioknkem · 2026-10-23
- The 'best free AI agent resource library on the internet,' in one Google Doc — ifioknkem · 2026-10-23
- Vercel adds no-account deploys: drag and drop a file to get a live URL — steren · 2026-10-23
- Dev runs 5 Claude Code sessions that coordinate via MCP Agent Mail to root his network cameras — doodlestein · 2026-10-23
- Vercel ships 'vercel deploy --temporary' for ephemeral agent-built deployments — cramforce · 2026-10-23