// MCP TOOL REFERENCE

MUND TOOLS

23 tools from the Mund MCP Server, categorised by risk level.

View the Mund policy → Token cost: 4,080 tokens →

// ALL 23 MUND TOOLS

READ 15 tools

Read mund_acknowledge_alert Mark a security event/alert as acknowledged. Args: - event_id (string): ID of the event to acknowledge ... Read mund_audit_mcp_permissions Analyze the permission scope and capabilities of an MCP server's tools. Identifies network access, filesyst... Read mund_check_typosquatting Check if an MCP server name is potentially typosquatting a known legitimate server. Compares against a list... Read mund_check_url Check if a URL is safe to access. Validates URLs against known dangerous patterns including: - Data exfilt... Read mund_get_events Retrieve recent security events from the Mund monitoring system. Supports filtering and pagination for eff... Read mund_get_status Get the current status of the Mund monitoring system. Returns information about: - Active analyzers and th... Read mund_intel_status Get threat intelligence health status including source coverage, pattern counts by category, and MITRE ATT&... Read mund_list_intel_sources List all configured threat intelligence sources with their status, update intervals, and pattern counts. Read mund_list_patterns Browse threat detection patterns by source, category, or enabled status. Read mund_list_rules List all configured detection rules. Args: - type: Optional filter by detection type - enabled_only: O... Read mund_scan_content Scan text or code content for security vulnerabilities, secrets, PII, and other issues. This tool analyzes... Read mund_scan_mcp_server Scan an MCP server manifest (server.json) for security issues before installation. Detects prompt injection... Read mund_threat_scan Scan content using threat intelligence patterns. Returns findings with MITRE ATT&CK technique mappings. Read mund_toggle_pattern Enable or disable a specific threat detection pattern. Read mund_validate_command Validate a shell command for safety before execution. Checks for dangerous patterns including: - Destructi...

WRITE 6 tools

Write mund_add_intel_source Add a custom threat intelligence feed. Supports URL, file, and API sources. Write mund_add_rule Add a custom security detection rule. Create custom rules to detect specific patterns in content. Rules us... Write mund_allowlist_pattern Add a pattern to the allowlist. Allowlisted patterns will be ignored by detection rules. Args: - patter... Write mund_block_pattern Add a pattern to the blocklist. Blocked patterns will always be flagged regardless of other rules. Args: ... Write mund_configure_notification Configure a notification channel for security alerts. Note: Full configuration requires environment variab... Write mund_update_threat_intel Pull latest threat patterns from configured intelligence feeds. Updates MITRE ATT&CK mappings and community...

DESTRUCTIVE 2 tools

Destructive mund_remove_intel_source Remove a custom threat intelligence source and all its patterns. Destructive mund_remove_rule Remove a custom detection rule by ID. Note: Built-in rules cannot be removed, only disabled. Args: - id...

// RUNNING THIS SERVER

The managed route: connect Mund through the PolicyLayer gateway — every tool call above is checked against your policy before it runs, with a full audit log.

DIRECT INSTALL (UNMANAGED) npx -y @weave_protocol/mund

// FAQ

How many tools does the Mund MCP server have? +

The Mund MCP server exposes 23 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on Mund tools? +

Route the Mund server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard — they are enforced on every call before it reaches the server.

What risk categories do Mund tools fall into? +

Mund tools are categorised as Read (15), Write (6), Destructive (2). Each category has a recommended default policy.

Let agents act without letting them run wild.

Route your MCP servers through PolicyLayer and every tool call is checked against your policy before it runs — allow, deny, or require approval. Per-identity grants. Full audit log. Live in minutes.

SECURE YOUR MCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.