MCPScan

sahiloj/MCPScan
★ 16 stars TypeScript 🔒 Security Updated 9d ago ⚠ Review
Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
View on GitHub →

Topics

ai-securityllm-securitymcpmcp-securitymcpscanmodel-context-protocoloffensive-securityopen-sourcesecuritysupply-chaintool-poisoningvulnerability-scanner