Advertise
MCP.so
Sign In
M

MCP Scan

@Chris79OG

Repository

Basic information

Category

Developer Tools

Transports

stdio

Author

Chris79OG

Submitted by

Chris79OG

About MCP Scan

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

#security#scanner#vulnerability#sarif#mcp#audit

MCP Scan config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "@syntrophy/mcp-scan"
      ]
    }
  }
}

MCP Scan tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Mcp Scan?

Mcp Scan is a security scanner for MCP servers. It detects common vulnerability patterns such as prompt injection and tool poisoning, flags excessive permissions, and outputs its findings as SARIF 2.1.0 reports.

How to use Mcp Scan?

Run it directly via npx without installation: npx @syntrophy/mcp-scan. No other configuration or invocation details are provided in the README.

Key features of Mcp Scan

  • Detects prompt injection risks
  • Identifies tool poisoning patterns
  • Flags excessive permissions
  • Outputs standard SARIF 2.1.0 reports
  • Runs without persistent installation via npx

Use cases of Mcp Scan

  • Auditing an MCP server for prompt injection vulnerabilities
  • Scanning for tool poisoning before deploying an MCP server
  • Checking an MCP server’s permission model for over‑broad access
  • Generating SARIF reports for integration with CI/CD pipelines

Frequently asked questions

1

What vulnerability types does Mcp Scan detect?

It detects prompt injection risks, tool poisoning patterns, and excessive permissions.

2

How do I install Mcp Scan?

Installation is not required; run it directly with `npx @syntrophy/mcp-scan`.

3

What output format does the scanner produce?

It outputs standard SARIF 2.1.0 reports.

4

Is Mcp Scan a standalone CLI tool?

Yes, it is executed as a one‑off command via npx; no explicit runtime dependencies are mentioned in the README.

Comments

More Developer Tools MCP servers

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

4

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

50

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

32

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

Termany

thinkany-ai

Agent-Native Terminal

174
Advertise