Skills/PyPI/authful-mcp-proxy

authful-mcp-proxy@0.3.0

VERIFIED

Publisher claims: "A Model Context Protocol (MCP) proxy server that performs OIDC authentication to obtain access tokens for remote MCP servers protected by token validation, and bridges HTTP transport to local stdio for MCP clients like Claude Desktop." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher stephan-eberle-stephaneberle9 · joined 2 days agoInstalls 52Last detonated 39 h ago
$claude mcp add authful-mcp-proxy -- uvx authful-mcp-proxy
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-27 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1
0.1sprocessexec /usr/bin/timeout
0.1sprocessexec .venv/bin/authful-mcp-proxy
0.1sprocessexited 127: timeout: failed to run command '.venv/bin/authful-mcp-proxy': No such file or directory
0.1sclaimedno tools/list reply (exit 127)
0.1sprocessscript backend runs setup only

Static findings

CRITICAL
Context shift attemptREADME.md:377 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Context shift attemptREADME.md:424 · Context shift attempt — trying to change operational modeFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01