広告掲載
MCP.so
ログイン
M

MCP Scan

@Chris79OG

リポジトリ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

Chris79OG

投稿者

Chris79OG

MCP Scan について

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

#security#scanner#vulnerability#sarif#mcp#audit

MCP Scan の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "@syntrophy/mcp-scan"
      ]
    }
  }
}

MCP Scan のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Mcp Scan?

Mcp Scan is a security scanner for MCP servers. It detects common vulnerability patterns such as prompt injection and tool poisoning, flags excessive permissions, and outputs its findings as SARIF 2.1.0 reports.

How to use Mcp Scan?

Run it directly via npx without installation: npx @syntrophy/mcp-scan. No other configuration or invocation details are provided in the README.

Key features of Mcp Scan

  • Detects prompt injection risks
  • Identifies tool poisoning patterns
  • Flags excessive permissions
  • Outputs standard SARIF 2.1.0 reports
  • Runs without persistent installation via npx

Use cases of Mcp Scan

  • Auditing an MCP server for prompt injection vulnerabilities
  • Scanning for tool poisoning before deploying an MCP server
  • Checking an MCP server’s permission model for over‑broad access
  • Generating SARIF reports for integration with CI/CD pipelines

よくある質問

1

What vulnerability types does Mcp Scan detect?

It detects prompt injection risks, tool poisoning patterns, and excessive permissions.

2

How do I install Mcp Scan?

Installation is not required; run it directly with `npx @syntrophy/mcp-scan`.

3

What output format does the scanner produce?

It outputs standard SARIF 2.1.0 reports.

4

Is Mcp Scan a standalone CLI tool?

Yes, it is executed as a one‑off command via npx; no explicit runtime dependencies are mentioned in the README.

コメント

「開発者ツール」の他のコンテンツ

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

Agent Conductor

icohangar-ops

Agent conductor — AGENTS.md contract parser, SKILL.md registry, CHP decision engine over MCP

Total CMS

Joe Workman

Read-only Total CMS docs and site content over MCP: exact Twig signatures, field types, schema options, the CLI, release notes and comparisons. No key required.

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

32

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

3
広告掲載