MCP.so
ログイン
M

Mcp Scan

@Chris79OG

リポジトリ

Mcp Scan について

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

#security#scanner#vulnerability#sarif#mcp#audit

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

公開者

Chris79OG

投稿者

Chris79OG

設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "@syntrophy/mcp-scan"
      ]
    }
  }
}

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Mcp Scan?

Mcp Scan is a security scanner for MCP servers. It detects common vulnerability patterns such as prompt injection and tool poisoning, flags excessive permissions, and outputs its findings as SARIF 2.1.0 reports.

How to use Mcp Scan?

Run it directly via npx without installation: npx @syntrophy/mcp-scan. No other configuration or invocation details are provided in the README.

Key features of Mcp Scan

  • Detects prompt injection risks
  • Identifies tool poisoning patterns
  • Flags excessive permissions
  • Outputs standard SARIF 2.1.0 reports
  • Runs without persistent installation via npx

Use cases of Mcp Scan

  • Auditing an MCP server for prompt injection vulnerabilities
  • Scanning for tool poisoning before deploying an MCP server
  • Checking an MCP server’s permission model for over‑broad access
  • Generating SARIF reports for integration with CI/CD pipelines

FAQ from Mcp Scan

What vulnerability types does Mcp Scan detect?

It detects prompt injection risks, tool poisoning patterns, and excessive permissions.

How do I install Mcp Scan?

Installation is not required; run it directly with npx @syntrophy/mcp-scan.

What output format does the scanner produce?

It outputs standard SARIF 2.1.0 reports.

Is Mcp Scan a standalone CLI tool?

Yes, it is executed as a one‑off command via npx; no explicit runtime dependencies are mentioned in the README.

コメント

「開発者ツール」の他のコンテンツ

MCP-Bridge

SecretiveShell

A middleware to provide an openAI compatible endpoint that can call MCP tools

928

Deepwiki MCP Server

regenrek

📖 MCP server for fetch deepwiki.com and get latest knowledge in Cursor and other Code Editors

1.4K

MCP Framework

QuantGeekDev

The Typescript MCP Framework

924

Code Index MCP

johnhuang316

A Model Context Protocol (MCP) server that helps large language models index, search, and analyze code repositories with minimal setup

979

Test

x1xhlol

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sou

141.7K