Below you will find pages that utilize the taxonomy term “Subodhkc”
August 21, 2026
MCP Tenant Isolation Scan
Version updated for https://github.com/subodhkc/mcp-tenant-isolation to version v2.0.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This action is a static analysis tool that scans multi-tenant software code to identify and flag potential issues related to tenant isolation. It checks various patterns across database queries, API routes, cache keys, file storage, schema design, logging, and MCP server architecture. The tool provides detailed findings with rule IDs, files, lines, missing guards, and remediation hints. The scan is deterministic and works with TypeScript, JavaScript, Prisma, Drizzle, raw SQL, Next.js, Express, and Fastify.
August 7, 2026
MCP Tenant Isolation Scan
Version updated for https://github.com/subodhkc/mcp-tenant-isolation to version v1.6.1.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action, mcp-tenant-isolation, is a static analysis tool designed to detect and prevent cross-tenant data leakage in multi-tenant SaaS applications and MCP server codebases. It uses 57 deterministic rules to check for common vulnerabilities related to tenant isolation, database query filtering, IDOR prevention, cache key scoping, RLS, schema gaps, and MCP-specific risks such as tool visibility, cache prefix, session binding, credential vault, and more. The tool supports various frameworks including Prisma, Drizzle, raw SQL, Next.js, Express, and Fastify, making it versatile for different types of projects.