Garita MCP MCP Tools
Garita MCP exposes 30 tools. Each one has its own page with the configuration for every client that can run this server.
-
audit_mcp_serveraudit mcp server
-
simulate_approvalsimulate approval
-
detect_poisoned_tool_descriptionsdetect poisoned tool descriptions
-
check_known_vulnerabilitiesRead-onlycheck known vulnerabilities
-
detect_tool_rug_pulldetect tool rug pull
-
detect_poisoned_config_filesdetect poisoned config files
-
check_package_authenticityRead-onlycheck package authenticity
-
detect_memory_poisoningdetect memory poisoning
-
detect_ssrf_riskdetect ssrf risk
-
detect_path_traversal_riskdetect path traversal risk
-
detect_command_injection_riskdetect command injection risk
-
detect_sql_injection_riskdetect sql injection risk
-
detect_token_passthrough_riskdetect token passthrough risk
-
detect_hardcoded_secrets_riskdetect hardcoded secrets risk
-
detect_insecure_deserialization_riskdetect insecure deserialization risk
-
detect_toxic_flow_riskdetect toxic flow risk
-
detect_ssti_riskdetect ssti risk
-
detect_dynamic_code_riskdetect dynamic code risk
-
detect_dns_rebinding_riskdetect dns rebinding risk
-
detect_missing_auth_riskdetect missing auth risk
-
detect_mcp_stdio_launch_riskdetect mcp stdio launch risk
-
detect_redos_riskdetect redos risk
-
detect_session_hijack_riskdetect session hijack risk
-
detect_oauth_audience_confusion_riskdetect oauth audience confusion risk
-
detect_unbounded_allocation_riskdetect unbounded allocation risk
-
detect_cross_client_leak_riskdetect cross client leak risk
-
detect_sampling_hijack_riskdetect sampling hijack risk
-
detect_output_schema_ssrf_riskdetect output schema ssrf risk
-
detect_excessive_agency_riskdetect excessive agency risk
-
detect_call_spoofing_riskdetect call spoofing risk
This list was read from the server itself, by connecting to it and calling tools/list on 14 November 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.