mcpgawk
Monitor MCP tools and stop unapproved changes
Check package installations against vulnerability advisories

refuse.dev checks software packages before they are installed. Its command-line shim sits in front of common package managers, examining requested versions against vulnerability advisories and blocking those with known issues. The same checks can cover commands typed by a developer, generated by an AI coding agent, or run in a continuous integration workflow.
Teams can use the hosted service or run the server themselves, with support spanning language packages, Dockerfile dependencies, GitHub Actions, and Linux distribution packages. When a version is refused, the tool suggests an alternative version. An online playground and MCP support extend the workflow beyond direct terminal use.
Tried it? Share a useful thought or ask a question.
Good conversations start with a hello.
Sign in to comment