Heimdall — MCP Security Scanner

Name: Heimdall — MCP Security Scanner
Author: caglarbozkurt

@caglarbozkurt

代码仓库主页

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

caglarbozkurt

提交者

Çağlar Bozkurt

关于 Heimdall — MCP Security Scanner

Security scanner for MCP servers — vet an MCP before you wire it into an agent. Detects prompt-injection, credential exfiltration (via taint analysis), RCE, and supply-chain risks, and catches cross-server exfil chains no single server reveals. Zero-dependency local CLI, SARIF ou

#cli #security #mcp #compliance #security-scanner #sarif #ai-agents #sast #supply-chain-security #prompt-injection #model-context-protocol #agent-security

Heimdall — MCP Security Scanner 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "heimdall": {
      "command": "npx",
      "args": [
        "-y",
        "--package",
        "mcp-heimdall-scan",
        "heimdall-mcp"
      ]
    }
  }
}

Heimdall — MCP Security Scanner 工具

Statically vet an MCP server (or a whole MCP client config) BEFORE trusting or installing it. Checks prompt-injection / tool-poisoning, risky capabilities (fs/network/shell/eval/credentials), proven data-exfiltration paths, dependency CVEs, provenance, and multi-server composition. Returns a pass/warn/fail verdict with cited evidence. Static analysis only — downloads the package but does NOT execute it. Use it when the user is about to add/connect an MCP server.

概览

What is Heimdall — Mcp Security Scanner?

Heimdall is a local, pre-flight security scanner for Model Context Protocol (MCP) servers. It vets a single server or an entire agent configuration before an agent trusts it, without running the server by default, and requires no account or backend.

How to use Heimdall — Mcp Security Scanner?

Use the CLI via npx mcp-heimdall-scan <target> or install globally. Targets include npm/PyPI packages, local directories, git repositories, a tools/list dump, or an MCP client config file (e.g., claude_desktop_config.json). Options like --policy, --online, --json, and --sarif customize the scan. It also ships as a GitHub Action and as an MCP server itself.

Key features of Heimdall — Mcp Security Scanner

Static analysis without executing server code.
Detects injection, capability, exfiltration, provenance, and CVEs.
Proven data-flow paths for JS/TS (file:line evidence).
Audits whole agent configs for cross-server exfiltration chains.
Policy-based verdicts (default, strict, custom waivers with expiry).
Runs entirely locally, no account or backend needed.

Use cases of Heimdall — Mcp Security Scanner

Vet a server package before installing it in your agent.
Audit your entire MCP client config (e.g., claude_desktop_config.json) for cross-server risks.
Gate pull requests in CI using the GitHub Action to fail on risky servers.
Use the MCP server mode to let your agent scan a server before connecting to it.
Run behavioral validation (heimdall validate) in a disposable VM to check static findings against runtime behavior.

FAQ from Heimdall — Mcp

开发工具分类下的更多 MCP 服务器

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

Mcp-Warden

ermoluk

Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and databases through scoped presets; secrets stay in your OS keychain and never enter the agent's context.

Termany

thinkany-ai

Agent-Native Terminal

174

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

Perfex CRM

themesic

Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.