mcp-scan

Abanoub-Rodolf/mcp-scan

★ 1 stars TypeScript Security Updated today

Open-source security scanner for MCP servers. Audits 17 AI tool clients for secrets, prompt injection, supply-chain risks, and 17 check classes. npx mcp-scan@latest

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "-y",
        "Abanoub-Rodolf/mcp-scan"
      ]
    }
  }
}

README Excerpt

<p align="center"><img src="https://raw.githubusercontent.com/Abanoub-Rodolf/mcp-scan/main/assets/demo.gif" width="800" alt="mcp-scan auto-detecting two clients and reporting two critical findings"></p> **Open-source security scanner for Model Context Protocol (MCP) servers.** MCP servers run with full access to your filesystem, API keys, and network. mcp-scan audits every MCP server configuration on your system, detecting leaked secrets, prompt injection risks, supply-chain vulnerabilities, and

Topics

ai-securityclidevtoolsllm-securitymcpmcp-securitymodel-context-protocolprompt-injectionsecuritysecurity-scannersupply-chain-securitytypescript

mcp-scan

Quick Install

README Excerpt

Topics

Related Security Servers