CanopiiCanopiiAll serversEnterprise →
io.github.Hlobo-dev/tengu-firm

io.github.Hlobo-dev/tengu-firm v2.114

Security Trust Score
Grade B · Moderate posture
Tier 1 · Public sourceHigh confidence · 90%
Declared MCP capabilities
ResourcesPrompts

Host io.github.Hlobo-dev/tengu-firm in a governed environment — SSO in front, every tool call attributed and audited.

Reputation0stars0forks0open issuestodaylast commit<1yage

Security controls

Deterministic, evidence-backed. Score earned from passing controls; a failed guard caps it.

Model–MCP Runtime Guardrails

  • Warn
    Strict JSON Schema Enforcementschemas not strict

    Tool inputs are constrained (additionalProperties:false), so unexpected arguments can't be smuggled in.

    Fix: Set additionalProperties:false and require explicit parameters on every tool.

  • Pass
    Indirect Prompt Injection (IPI) Defensesguardno injection markers

    Tool/prompt/resource text is free of hidden instructions that could hijack the agent.

  • Pass
    User-in-the-Loop / Approval Scopeguardno destructive tool scope

    No over-broad or destructive tools (arbitrary shell, bulk-delete) that warrant human approval.

  • N/A
    Tool Definition Integrityguardno prior version to diff

    Every consecutive version pair is diffed for new injection markers or destructive scope — a risky diff anywhere in history is a rug-pull (fail, durable); benign description drift warns.

Application Security Checks

  • Warn
    No SSRF sinksguard1 occurrence

    Fetching tool-supplied URLs can pivot into internal networks and metadata services.

    examples/list_tools.py:22

    Fix: Allow-list destinations; reject arbitrary/loopback/link-local URLs.

  • Warn
    Dependencies pinned (lockfile)no lockfile found

    A lockfile makes installs reproducible and resistant to silent dependency swaps.

    Fix: Commit a lockfile (package-lock.json / pnpm-lock.yaml / poetry.lock).

  • Warn
    Has a security policyno security policy

    A SECURITY.md gives a private path to report vulnerabilities.

    Fix: Add SECURITY.md with a disclosure contact and process.

  • Warn
    Adoption & popularitylimited adoption

    A small, capped nudge from stars/downloads — widely-used servers get more eyes on bugs. It can never offset a real security failure.

    Fix: Adoption grows naturally with real-world use; this never gates the score.

  • Pass
    No command-injection sinksguardno sinks found

    Untrusted tool input reaching a shell yields remote code execution.

  • Pass
    No dynamic code executionguardno sinks found

    eval()/exec()/Function() on tool-derived strings allows arbitrary code execution.

  • Pass
    No path traversalguardno sinks found

    Naive path checks let tools read/write outside intended directories (EscapeRoute-class).

  • Pass
    No unsafe deserializationguardno sinks found

    pickle/yaml.load/etc. on untrusted data can execute code.

  • Pass
    No committed secretsguardno secrets found

    Hardcoded keys/tokens in published source are live credentials an attacker can use.

  • Pass
    Credentials sourced from environmentreads credentials from environment

    Reading secrets from env/secret stores avoids hardcoding them.

  • Pass
    Actively maintainedrecent commits

    Unmaintained servers don't receive security fixes.

  • Pass
    Repository not archivedguardactive

    Archived repositories will never be patched.

  • Pass
    Declares a licenseMIT

    A clear license is required for legal enterprise use.

  • Not checked
    No known-vulnerable dependenciesno lockfile found

    Runtime dependencies (parsed from the lockfile) are scanned against OSV.dev for published CVEs. Advisory: flagged dependencies lower the score but don't hard-cap it, since transitive reachability is unproven.

  • Not checked
    Signed releasesnot evaluated

    Signed releases let consumers verify artifacts weren't tampered with.

  • N/A
    No install/post-install scriptsguardno published package

    install hooks run arbitrary code on every consumer at install time.

  • N/A
    Package name not typosquattingguardno published package

    Names mimicking popular packages are a common malware delivery vector.

  • N/A
    Published with provenanceno published package

    Build provenance attests the artifact was built from the claimed source by CI.

  • N/A
    Established maintainerno published package

    Brand-new / single anonymous maintainers raise takeover and malware risk.

Transport & Trust Model

  • Warn
    IAM / Authentication Scopingno authentication handling detected

    OAuth 2.1 / Protected Resource Metadata gates who can invoke tools.

    Fix: Implement OAuth 2.1 with a .well-known/oauth-protected-resource document.

  • Warn
    Execution Sandboxingruns natively (no container image)

    A container/sandbox image limits blast radius; a server that runs natively has full host access.

    Fix: Ship a Dockerfile/Containerfile (or document a sandboxed run) so the server runs isolated.

  • Pass
    Transport Encryption (TLS)guardall remotes use HTTPS

    Plaintext HTTP exposes traffic and bearer tokens to interception.

  • Pass
    Network Exposureno bind-all detected

    Binding 0.0.0.0 or exposing debug inspectors widens the attack surface.

  • N/A
    Live Endpoint Reachablenot dynamically scanned

    A dynamic scan connected to the declared remote endpoint and it responded — verified live, not a dead URL.

  • N/A
    Authentication Enforced (live)not dynamically scanned

    If the server declares auth is required, it must actually reject anonymous clients. Serving tools to unauthenticated callers is a real exposure.

Tools (336)

tengu_logstengu_macrotengu_readytengu_cryptotengu_regimetengu_statustengu_v2_vartengu_snapshottengu_v2_drifttengu_ml_healthtengu_v2_stresstengu_v3_credittengu_v3_eventstengu_ml_predicttengu_ml_weightstengu_v3_hedgingtengu_v3_metricstengu_cache_statstengu_v3_accuracytengu_v3_slippagetengu_ml_top_pickstengu_v2_intervalstengu_v3_intel_gextengu_v3_intel_wsbtengu_v3_tape_barstengu_v3_twap_plantengu_v3_vwap_plantengu_v3_api_quotastengu_v3_governancetengu_v3_thresholdstengu_v3_agents_listtengu_v3_intel_charttengu_v3_news_alertstengu_v3_news_eventstengu_v3_news_latesttengu_v3_signals_mtftengu_v3_smart_routetengu_v3_stream_barstengu_v3_stream_newstengu_v2_factor_decaytengu_v3_agent_latesttengu_v3_agent_statustengu_v3_credit_bondstengu_v3_credit_loanstengu_v3_events_typestengu_v3_intel_sec13ftengu_v3_news_ratingstengu_v3_news_summarytengu_v3_news_sundowntengu_v3_self_healingtengu_v3_signals_vetotengu_v3_stream_tickstengu_v3_tape_futurestengu_v3_tape_optionstengu_v3_trade_setupstengu_copilot_universetengu_insider_clusterstengu_v2_research_readtengu_v3_alerts_activetengu_v3_backtest_runstengu_v3_believabilitytengu_v3_cost_estimatetengu_v3_earnings_nexttengu_v3_intel_patentstengu_v3_intel_twittertengu_v3_memory_recalltengu_v3_news_by_topictengu_v3_news_categorytengu_v3_news_trendingtengu_v3_stream_alertstengu_v3_stream_eventstengu_v3_stream_quotestengu_v3_stream_statustengu_v3_system_healthtengu_v3_universe_scantengu_copilot_top_pickstengu_v2_regime_historytengu_v2_short_interesttengu_v3_briefing_dailytengu_v3_credit_indicestengu_v3_credit_ratingstengu_v3_framework_listtengu_v3_intel_cftc_cottengu_v3_intel_congresstengu_v3_intel_insiderstengu_v3_intel_lobbyingtengu_v3_intel_max_paintengu_v3_intel_news_protengu_v3_lab_strategiestengu_v3_prices_historytengu_v3_signals_fusiontengu_v3_stream_signalstengu_ml_weights_historytengu_research_knowledgetengu_v2_crash_scenariostengu_v2_regime_forecasttengu_v3_briefing_statustengu_v3_lab_deploymentstengu_v3_market_universetengu_v3_news_aggregatedtengu_v3_news_structuredtengu_v3_reference_batchtengu_v3_resolver_statustengu_v3_strategies_listtengu_v3_tape_index_barstengu_v3_transcript_texttengu_copilot_ticker_fulltengu_v3_accounting_flagstengu_v3_factor_exposurestengu_v3_features_datasettengu_v3_fundamentals_alltengu_v3_fundamentals_pittengu_v3_intel_ml_driverstengu_v3_news_event_by_idtengu_v3_news_ticker_newstengu_v3_news_ticker_onlytengu_v3_optimizer_latesttengu_v3_position_monitortengu_v3_reference_lookuptengu_v3_skills_ta_mastertengu_v3_strategy_metricstengu_v3_strategy_signalstengu_v3_stream_decisionstengu_v3_transcripts_listtengu_copilot_macro_regimetengu_copilot_score_tickertengu_copilot_track_recordtengu_v2_alpha_discoveriestengu_v2_research_datasetstengu_v3_factor_predictorstengu_v3_fundamentals_fulltengu_v3_fundamentals_newstengu_v3_fundamentals_xbrltengu_v3_intel_borrow_costtengu_v3_intel_commoditiestengu_v3_intel_etf_summarytengu_v3_intel_gex_historytengu_v3_intel_news_cryptotengu_v3_intel_news_moverstengu_v3_intel_politicianstengu_v3_intel_vol_surfacetengu_v3_intel_yield_curvetengu_v3_kelly_uncertaintytengu_v3_news_forex_eventstengu_v3_news_forex_latesttengu_v3_news_forex_pricestengu_v3_news_multi_tickertengu_v3_news_top_mentionstengu_v3_reference_historytengu_v3_ultimate_decisiontengu_v3_validation_trialstengu_v3_workforce_layoffstengu_copilot_live_ic_drifttengu_copilot_signal_healthtengu_v2_feature_importancetengu_v2_signal_correlationtengu_v2_strategy_evolutiontengu_v3_credit_cds_historytengu_v3_features_cataloguetengu_v3_fundamentals_peerstengu_v3_intel_etf_holdingstengu_v3_intel_insider_flowtengu_v3_intel_iv_analyticstengu_v3_intel_off_exchangetengu_v3_intel_options_flowtengu_v3_memory_reflectionstengu_v3_news_crypto_eventstengu_v3_news_crypto_latesttengu_v3_news_forex_summarytengu_v3_origin_macro_pulsetengu_v3_prediction_trackertengu_v3_reference_coveragetengu_v3_research_fetch_urltengu_v3_research_synthesistengu_v3_risk_portfolio_vartengu_v3_sec_filing_extracttengu_v3_skills_apex_equitytengu_v3_tape_futures_curvetengu_v3_tape_options_chaintengu_v3_transcripts_searchtengu_v3_workforce_momentumtengu_copilot_voter_ic_drifttengu_v3_backtest_run_detailtengu_v3_fundamentals_growthtengu_v3_fundamentals_pricestengu_v3_fundamentals_searchtengu_v3_intel_gov_contractstengu_v3_intel_ml_predictiontengu_v3_intel_options_chaintengu_v3_news_crypto_summarytengu_v3_news_crypto_sundowntengu_v3_news_curated_eventstengu_v3_news_forex_trendingtengu_v3_origin_insider_flowtengu_v3_origin_ipo_pipelinetengu_v3_reference_crosswalktengu_v3_research_web_searchtengu_v3_signals_cross_assettengu_v3_skills_trading_plantengu_v3_tape_microstructuretengu_copilot_decision_reviewtengu_v3_earnings_next_streamtengu_v3_fundamentals_metricstengu_v3_fundamentals_tickerstengu_v3_intel_insider_tradestengu_v3_intel_macro_snapshottengu_v3_intel_news_headlinestengu_v3_intel_options_volumetengu_v3_intel_risk_free_ratetengu_v3_intel_sec13f_changestengu_v3_intel_sec13f_historytengu_v3_intel_short_interesttengu_v3_intel_voter_coveragetengu_v3_intel_voter_ic_drifttengu_v3_macro_treasury_curvetengu_v3_news_crypto_trendingtengu_v3_news_sentiment_statstengu_v3_private_markets_dealtengu_v3_private_markets_fundtengu_v3_research_x_sentimenttengu_v3_stream_ingest_statustengu_v3_stream_market_eventstengu_v3_copilot_thesis_alertstengu_v3_fundamentals_screenertengu_v3_fundamentals_segmentstengu_v3_intel_darkpool_recenttengu_v3_intel_darkpool_tickertengu_v3_intel_insider_form144tengu_v3_intel_news_why_movingtengu_v3_intel_pnl_attributiontengu_v3_market_events_catchuptengu_v3_news_market_sentimenttengu_v3_origin_short_activitytengu_v3_origin_whale_holdingstengu_v3_stream_realtime_guidetengu_copilot_ticker_smartmoneytengu_v3_factor_characteristicstengu_v3_fundamentals_dividendstengu_v3_intel_calendar_ratingstengu_v3_intel_corporate_donorstengu_v3_intel_darkpool_historytengu_v3_intel_earnings_historytengu_v3_intel_street_estimatestengu_v3_intel_top_shareholderstengu_v3_news_forex_by_categorytengu_v3_news_sentiment_historytengu_v3_private_markets_persontengu_v3_private_markets_searchtengu_v3_stream_universe_statustengu_v3_validation_trial_counttengu_v3_fundamentals_ai_analyzetengu_v3_fundamentals_historicaltengu_v3_intel_analyst_consensustengu_v3_intel_exec_compensationtengu_v3_intel_factor_importancetengu_v3_intel_model_calibrationtengu_v3_intel_voter_attributiontengu_v3_news_crypto_by_categorytengu_v3_news_crypto_ticker_onlytengu_v3_news_forex_top_mentionstengu_v3_private_markets_companytengu_v3_workforce_layoff_screentengu_copilot_ticker_transparencytengu_v3_fundamentals_sec_filingstengu_v3_intel_calendar_economicstengu_v3_intel_gov_contracts_livetengu_v3_news_crypto_multi_tickertengu_v3_news_crypto_ticker_pricetengu_v3_news_crypto_top_mentionstengu_v3_prices_corporate_actionstengu_v3_private_markets_investortengu_v3_supply_chain_geo_revenuetengu_v3_fundamentals_company_fulltengu_v3_fundamentals_companyfactstengu_v3_fundamentals_pit_coveragetengu_v3_fundamentals_pit_vintagestengu_v3_intel_borrow_cost_historytengu_v3_intel_news_press_releasestengu_v3_intel_options_flow_tickertengu_v3_news_crypto_whale_summarytengu_v3_news_forex_sundown_digesttengu_v3_private_markets_companiestengu_v3_private_markets_relationstengu_v3_research_correlation_meshtengu_v3_stream_tick_writer_statustengu_v3_workforce_momentum_screentengu_v3_fundamentals_company_factstengu_v3_intel_options_flow_historytengu_v3_news_all_tickers_sentimenttengu_v3_news_forex_sentiment_statstengu_v3_private_markets_aggregatestengu_v3_supply_chain_relationshipstengu_v3_fundamentals_balance_sheetstengu_v3_fundamentals_insider_tradestengu_v3_fundamentals_price_snapshottengu_v3_funds_mutual_fund_ownershiptengu_v3_intel_insider_flow_coveragetengu_v3_news_crypto_sentiment_statstengu_v3_news_forex_market_sentimenttengu_v3_intel_short_interest_historytengu_v3_news_crypto_market_sentimenttengu_v3_news_forex_economic_calendartengu_v3_portfolio_risk_parity_latesttengu_v3_stream_news_publisher_statustengu_v3_factor_characteristic_historytengu_v3_fundamentals_metrics_snapshottengu_v3_fundamentals_screener_presetstengu_v3_private_markets_company_dealstengu_v3_fundamentals_income_statementstengu_v3_intel_street_estimates_historytengu_v3_intel_top_shareholders_currenttengu_v3_news_crypto_whale_transactionstengu_v3_private_markets_deal_relationstengu_v3_private_markets_fund_relationstengu_v3_private_markets_search_suggesttengu_v3_stream_signal_generator_statustengu_v3_intel_calendar_conference_callstengu_v3_intel_street_estimates_guidancetengu_v3_intel_top_shareholders_coveragetengu_v3_private_markets_company_dossiertengu_v3_private_markets_limited_partnertengu_v3_supply_chain_revenue_dependencetengu_v3_private_markets_company_realtimetengu_v3_private_markets_person_relationstengu_v3_private_markets_service_providertengu_v3_stream_decision_generator_statustengu_v3_fundamentals_cash_flow_statementstengu_v3_news_crypto_all_tickers_sentimenttengu_v3_private_markets_company_investorstengu_v3_private_markets_company_relationstengu_v3_private_markets_investor_relationstengu_v3_private_markets_company_comparablestengu_v3_fundamentals_earnings_press_releasestengu_v3_fundamentals_institutional_ownershiptengu_v3_private_markets_limited_partner_relationstengu_v3_private_markets_service_provider_relations