Trust Engine/MCP Server

lasso-security/mcp-gateway

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

378 starsPythonMITagentagent-securitygatewaygenai

REVIEWED70/100

Scanned 2026-07-11 · gemini v1

Dimension breakdown

Security

35/100

4 findings

Quality

78/100

4 findings

License

90/100

1 finding

Completeness

90/100

1 finding

Findings (10)

CRITICAL: 1HIGH: 2MEDIUM: 4LOW: 1INFO: 2

CRITICALsecurityCommand Injection via mcp.json Server Configuration
HIGHsecurityUnsafe Dynamic Code Generation from Proxied Server Metadata
HIGHqualityReliance on Global State for CLI Arguments
MEDIUMsecurityPath Traversal Vulnerabilities
MEDIUMsecurityIncomplete or Bypassable Sanitization and Guardrails

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/lasso-security/mcp-gateway.svg)](https://archimedes.market/r/lasso-security/mcp-gateway)

HTML

<a href="https://archimedes.market/r/lasso-security/mcp-gateway"><img src="https://archimedes.market/api/badge/lasso-security/mcp-gateway.svg" alt="Archimedes Trust Verified"/></a>