regex-safety-audit-mcp
Parses a regex into a real AST to catch catastrophic-backtracking (ReDoS) risk — nested unbounded quantifiers, ambiguous alternation inside a repeated group, and backreferences — without ever executing the pattern itself. Generates proof-of-concept attack strings and JS-safe rewrites (JS has no atomic groups or possessive quantifiers, so the usual PCRE/.NET fixes don't transfer).
How to pay
Subscribe
$7/month
Predictable monthly cost with included usage. Best for steady, high-volume traffic.
- Unlimited tools within plan limits
- One API key, billed once a month
- Cancel any time
Parses a regex into a real AST to catch catastrophic-backtracking (ReDoS) risk — nested unbounded quantifiers, ambiguous alternation inside a repeated group, and backreferences — without ever executing the pattern itself. Generates proof-of-concept attack strings and JS-safe rewrites (JS has no atomic groups or possessive quantifiers, so the usual PCRE/.NET fixes don't transfer).