Bawbel Scanner
io.github.bawbel/bawbel-scanner
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Install surfaces
How Bawbel Scanner runs, per the official MCP registry entry.
- pypi
uvx [email protected]
Governed execution
How KLA gates calls to Bawbel Scanner once it is connected.
A published policy defines which Bawbel Scanner actions an agent may take and under what conditions. Each call passes through a policy gate at the tool-call boundary. Permitted actions execute, with the policy basis recorded. Flagged actions execute and are sampled for scheduled human review. High-stakes actions pause and route to a named reviewer on the Decision Desk. The call, the policy decision, and any approval are sealed as an evidence record.
KLA also governs the agent frameworks and model providers you already run. See integrations.