#scanner

MCP server + CLI that scans any project to discover its full AI ecosystem: MCP servers, context files, skills, agents, memories, and configurations for 19+ AI tools (Claude, Cursor, Windsurf, Copilot, Gemini, Codex, and more). Generates interactive HTML dashboards and supports ec

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

QuantumScan PQC Scanner

gaiabio12-design

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools:

Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.

AgentsID MCP Scanner

stevenkozeniesky02

Security scanner for MCP servers. Scores any server against the AgentsID trust framework live scan via npx or lookup pre-scanned results from the public registry of 15,983 servers. Returns trust score (0–100), grade (A–F), and findings across injection, permissions, validation, a

MCP server that scans Next.js projects and returns a compact summary of routes, API endpoints, database schema, and security issues.

Cloud Audit

gebalamariusz

Open-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP s

AEO (Agent Engine Optimization) scanner — scores and benchmarks 12,800+ AI agent tools for discoverability, quality, and agent compatibility. 14 MCP tools for searching, scanning, comparing, and benchmarking.

Tooltrust Scanner

AgentSafe-AI

Scan MCP servers for security risks before your AI agent trusts them. Detects prompt injection, supply chain attacks (including the LiteLLM 1.82.7/1.82.8 backdoor), excessive permissions, arbitrary code execution, typosquatting, and tool shadowing. Add to your .mcp.json and let y

Agent Ready

mlava

AI agent readability scanner — score any public URL against the Vercel Agent Readability Spec, llmstxt.org, and 6 agent-protocol manifests (MCP, A2A, agents.json, agent-permissions, UCP, x402). 59 checks with per-check fix guidance. Same engine as agent-ready.dev.

MCP Watch 🔍

kapilduraphe

A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.