Agent Guild MCP Server

Agent Guild is a sophisticated reputation network MCP server with generally sound architecture and reasonable security practices. However, several medium-severity concerns exist: custodial key storage in the store (private keys held server-side), broad permission scope for an escrow/payment system, and incomplete input validation in some paths. The codebase is well-structured with explicit integrity checks (canonical writes, checkpoints), but the economic layer (escrow, settlement, billing) introduces risk proportionate to the financial stakes. Permissions align with the stated purpose, but the custodial design and payment handling warrant careful review. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 1 high severity).

4 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.