mcp-sentinel

syltharion/mcp-sentinel

★ 0 stars Python Security Updated today

MCP Server Security Audit Engine — scan MCP servers for exec injection, path traversal, tool poisoning, SQL injection, command injection, SSRF vulnerabilities

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-sentinel": {
      "command": "uvx",
      "args": [
        "mcp-sentinel"
      ]
    }
  }
}

Or install with pip: pip install mcp-sentinel

README Excerpt

MCP Server 安全审计 CLI 工具 — 扫描 MCP Server 源码，检测安全隐患，生成信任评分和报告。 > **版本**: 1.0.0 | **Python**: 3.10+ | **依赖**: 无（纯标准库） --- - **6 类漏洞检测**：基于 AST 精确分析，覆盖主流攻击向量 - 🚨 **Exec Injection** — 检测 `eval()`、`exec()`、`os.system()`、`subprocess.*` 等危险调用 - 🚨 **Path Traversal** — 检测未过滤的 `../` 路径拼接 - 🚨 **Tool Poisoning** — 检测 MCP tool name/description 中的注入提示

Tools (7)

command_injectionexec_injectionpath_traversalsql_injectionssrftexttool_poisoning

mcp-sentinel

Quick Install

README Excerpt

Tools (7)

Related Security Servers