correctover-scan

DSHCorrectover/correctover-scan
★ 0 stars JavaScript Security Updated 2d ago
Security scanner for MCP servers and AI agents — detects credential leaks, RCE, SSRF and missing auth against OWASP AISVS 1.0; also scans published JS bundles/npm packages.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "correctover-scan": {
      "command": "npx",
      "args": [
        "-y",
        "DSHCorrectover/correctover-scan"
      ]
    }
  }
}

README Excerpt

> Security scanner for MCP servers and AI agents — detects credential exposure, SSRF, command injection risk and missing auth across your MCP configuration. 14 checks mapped to OWASP AISVS 1.0. Run anywhere with `npx correctover-scan`. --- - **Third-party interoperability** — joint assessment merged into the [EMILIA protocol](https://github.com/emiliaprotocol/emilia-protocol/pull/693)

Topics

ai-agent-securityai-securityclidevsecopsllm-securitymcpmcp-securitymodel-context-protocolnpmowaspsecuritysecurity-scannerstatic-analysissupply-chain-securityvulnerability-scanner