mcpsec

pfrederiksen/mcpsec
★ 3 stars Go Code/Dev Tools Updated today
OWASP MCP Top 10 security scanner for Model Context Protocol servers
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcpsec": {
      "command": "go",
      "args": [
        "run",
        "github.com/pfrederiksen/mcpsec@latest"
      ]
    }
  }
}

README Excerpt

Security scanner for Model Context Protocol (MCP) configurations, remote servers, and server source code. Think [Prowler](https://github.com/prowler-cloud/prowler), but purpose-built for MCP and aligned to the [OWASP MCP Top 10:2025 beta](https://owasp.org/www-project-mcp-top-10/). MCPSec performs evidence-based static config checks, approved-baseline drift detection, multi-client inventory and shadow-server policy checks, read-only remote MCP enumeration, and conservative lexical source analysi

Topics

ai-securitycligolangllm-securitymcpmodel-context-protocolowaspscannersecurity