mcp-security-scanner

shanefirek/mcp-security-scanner

★ 0 stars Unknown language 🔒 Security Updated 1d ago

Static security scanner for MCP server configs and code, mapped to the NSA's May 2026 MCP security guidance. 35+ checks across 11 threat categories.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-security-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "shanefirek/mcp-security-scanner"
      ]
    }
  }
}

README Excerpt

<div align="center"> **35+ checks. 11 threat categories. Audit your MCP servers before someone else does.** MCP adoption is outpacing its security model. This scanner audits MCP configurations and server code against the NSA's May 2026 security guidance — finding hardcoded secrets, unpinned versions, excessive permissions, and unaudited third-party servers.

mcp-security-scanner

Quick Install

README Excerpt

Related Security Servers