Bawbel Scanner

Wraps the Bawbel security scanner as MCP tools so agents can audit their own supply chain mid-conversation. Exposes scan_content, scan_server_card, and scan_creds for detecting AVE vulnerabilities like prompt injection, credential leaks, and unsafe delegation chains. The check_conformance tool scores MCP servers against the spec with 18 checks and an A+ to F grade. Lookup_ave and search_ave pull from the AVE threat intelligence database with AIVSS severity scores and remediation steps. Accept_finding writes justified suppressions directly into skill files as inline comments. Reach for this when you're vetting third-party servers before adding them to your config, reviewing agentic workflows for security holes, or enforcing conformance standards across a fleet of MCP endpoints.