MCP server directory

mcp-scan

Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.

mcp-scan is an open-source security scanner for Model Context Protocol (MCP) servers that audits configurations, detecting leaked secrets, prompt injection risks, supply-chain vulnerabilities, and data flow issues.

Version:: 2.3.0
Publisher:: GitHub Actions
Company:: Abanoub Rodolf Boctor (third-party)
Docs:: raw.githubusercontent.com/Abanoub-Rodolf/mcp-scan/HEAD/README.md; Summary written by google/gemini-2.5-flash-lite from the server’s own site and README; facts above come from the registries.; Logo: https://gitlab.com/assets/twitter_card-570ddb06edf56a2312253c5872489847a0f385112ddbcd71ccfa1570febab5d2.jpg

Install

Generated from the server’s transport data — never hand-written. Placeholders in angle brackets are yours to fill.

Run it with its own identity, a budget you set, and every call audited — no local config to keep in sync.

Add to a connect0 project

You will sign in first, then land back on this page.

What it can do

No capability summary yet — the publisher has not declared one and it has not been verified.