shipped agentlure 0.1.2.
it runs an MCP server in a sandbox before you install it. The sandbox home holds fake AWS keys, a fake .env, a fake SSH key. If the server reads them or sends their contents out, you get the captured request as proof.
pip install agentlure
