Heimdall — MCP Security Scanner

Name: Heimdall — MCP Security Scanner
Author: caglarbozkurt

@caglarbozkurt

Repository Homepage

Basic information

About Heimdall — MCP Security Scanner

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF ou

#cli #security #mcp #compliance #security-scanner #sarif #ai-agents #sast #supply-chain-security #prompt-injection #model-context-protocol #agent-security

Heimdall — MCP Security Scanner config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "heimdall": {
      "command": "npx",
      "args": [
        "-y",
        "--package",
        "mcp-heimdall-scan",
        "heimdall-mcp"
      ]
    }
  }
}

Heimdall — MCP Security Scanner tools

Statically vet an MCP server (or a whole MCP client config) BEFORE trusting or installing it. Checks prompt-injection / tool-poisoning, risky capabilities (fs/network/shell/eval/credentials), proven data-exfiltration paths, dependency CVEs, provenance, and multi-server composition. Returns a pass/warn/fail verdict with cited evidence. Static analysis only — downloads the package but does NOT execute it. Use it when the user is about to add/connect an MCP server.

Overview

What is Heimdall — Mcp Security Scanner?

Heimdall is a local, pre-flight security scanner for Model Context Protocol (MCP) servers. It vets a single server or an entire agent configuration before an agent trusts it, without running the server by default, and requires no account or backend.

How to use Heimdall — Mcp Security Scanner?

Use the CLI via npx mcp-heimdall-scan <target> or install globally. Targets include npm/PyPI packages, local directories, git repositories, a tools/list dump, or an MCP client config file (e.g., claude_desktop_config.json). Options like --policy, --online, --json, and --sarif customize the scan. It also ships as a GitHub Action and as an MCP server itself.

Key features of Heimdall — Mcp Security Scanner

Static analysis without executing server code.
Detects injection, capability, exfiltration, provenance, and CVEs.
Proven data-flow paths for JS/TS (file:line evidence).
Audits whole agent configs for cross-server exfiltration chains.
Policy-based verdicts (default, strict, custom waivers with expiry).
Runs entirely locally, no account or backend needed.

Use cases of Heimdall — Mcp Security Scanner

Vet a server package before installing it in your agent.
Audit your entire MCP client config (e.g., claude_desktop_config.json) for cross-server risks.
Gate pull requests in CI using the GitHub Action to fail on risky servers.
Use the MCP server mode to let your agent scan a server before connecting to it.
Run behavioral validation (heimdall validate) in a disposable VM to check static findings against runtime behavior.

FAQ from Heimdall — Mcp

Comments

More Developer Tools MCP servers

MilliGate (x402 Crypto Paywall)

MilliGate Core

MilliGate is a developer-first remote MCP server that functions as a secure crypto paywall. By leveraging the HTTP 402 (Payment Required) protocol, it allows developers to monetize AI agents, APIs, and digital infrastruc

Meticulous

Nebelus

Nebelus is an enterprise agentic-AI platform for regulated industries. This MCP server exposes the Nebelus Construction API: ~48 tools that give an MCP client full agent build parity — create/update/probe agents, edit ag

DocBin

Give an agent a place to put large output. Instead of returning 40k characters of a build log into the conversation, it posts the file to DocBin and hands back one short URL. Docs render with syntax highlighting and mark

ReactVision MCP

ReactVision, Inc

Most MCP servers hand your agent documentation. This one hands it a renderer. Write a single React Native codebase that ships native AR to phones and VR to headsets, then let your agent validate every prop, check each pl