mcpdx

joshuaruppe/mcpdx

★ 1 stars Python Security Updated today

Zero-dependency toolkit for authorized security assessment of Model Context Protocol (MCP) servers: enumerate the attack surface, run passive static audits, and opt-in fuzz tool inputs. JSON/Markdown/SARIF reports.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcpdx": {
      "command": "uvx",
      "args": [
        "mcpdx"
      ]
    }
  }
}

Or install with pip: pip install mcpdx

README Excerpt

<div align="center"> <img src="https://raw.githubusercontent.com/joshuaruppe/mcpdx/main/assets/banner.svg" alt="mcpdx" width="430"> **A security checkup for MCP servers** </div> `mcpdx` is a zero-dependency toolkit for **authorized** security assessment of over **stdio** or **Streamable HTTP**, enumerates the exposed attack surface

Tools (7)

auditcallenumfuzzreportscansnapshot

Topics

appseccybersecurityfuzzinginfosecmcpmodel-context-protocolpentestingpythonsarifsecuritysecurity-toolsvulnerability-scanner

mcpdx

Quick Install

README Excerpt

Tools (7)

Topics

Related Security Servers