mcp-scan

Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.

CategoryAI Agent Frameworks
AuthorGitHub Actions
Stars0
LanguageJavaScript
License
Last update2026-10-10
Sourcehttps://www.npmjs.com/package/mcp-scan

Tags: mcp, security, scanner, audit, model-context-protocol, mcp-scan, mcp-security, mcp-server, claude-desktop, cursor, vscode, windsurf, ai-security, llm-security, prompt-injection, supply-chain-security, secret-detection, typosquatting, data-flow-analysis, sarif, github-action, cli, devtools, security-audit, vulnerability-scanner

Maintain this project? Get it featured.

Alternatives to mcp-scan

rea morluto · ★278898 · TypeScript
Reverse engineer anything with agents, from app behavior down to native binaries.
deepseek-harness deepseek-ai · ★250738 · TypeScript
DeepSeek Harness: Everything is a Plugin.
ponytail DietrichGebert · ★164692 · JavaScript
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
gemini-cli google-gemini · ★107398 · TypeScript
An open-source AI agent that brings the power of Gemini directly into your terminal.
paperclip paperclipai · ★102899 · TypeScript
The open-source app everyone uses to manage agents at work
orca stablyai · ★93851 · TypeScript
Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and remote runtime.