广告合作
MCP.so
登录
M

MCP Scan

@Chris79OG

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

Chris79OG

提交者

Chris79OG

关于 MCP Scan

MCP server security scanner that detects vulnerability patterns in MCP server configurations and outputs SARIF reports. Scans for prompt injection risks, tool poisoning, excessive permissions, and other security issues in Model Context Protocol servers.

#security#scanner#vulnerability#sarif#mcp#audit

MCP Scan 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "@syntrophy/mcp-scan"
      ]
    }
  }
}

MCP Scan 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Mcp Scan?

Mcp Scan is a security scanner for MCP servers. It detects common vulnerability patterns such as prompt injection and tool poisoning, flags excessive permissions, and outputs its findings as SARIF 2.1.0 reports.

How to use Mcp Scan?

Run it directly via npx without installation: npx @syntrophy/mcp-scan. No other configuration or invocation details are provided in the README.

Key features of Mcp Scan

  • Detects prompt injection risks
  • Identifies tool poisoning patterns
  • Flags excessive permissions
  • Outputs standard SARIF 2.1.0 reports
  • Runs without persistent installation via npx

Use cases of Mcp Scan

  • Auditing an MCP server for prompt injection vulnerabilities
  • Scanning for tool poisoning before deploying an MCP server
  • Checking an MCP server’s permission model for over‑broad access
  • Generating SARIF reports for integration with CI/CD pipelines

常见问题

1

What vulnerability types does Mcp Scan detect?

It detects prompt injection risks, tool poisoning patterns, and excessive permissions.

2

How do I install Mcp Scan?

Installation is not required; run it directly with `npx @syntrophy/mcp-scan`.

3

What output format does the scanner produce?

It outputs standard SARIF 2.1.0 reports.

4

Is Mcp Scan a standalone CLI tool?

Yes, it is executed as a one‑off command via npx; no explicit runtime dependencies are mentioned in the README.

评论

开发工具 分类下的更多 MCP 服务器

SayLive

SayLIive

Publish the website your AI assistant just built, straight from the conversation. Static sites, your own domain, one payment, no subscription.

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

3

LocalCan

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

82

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

1

MCP Server By TestMu AI

TestMu AI

TestMu AI MCP Server lets developers run, debug, and triage tests through natural language directly from their IDE (Cursor, Claude, GitHub Copilot, and other MCP clients). It exposes five tools — HyperExecute (test orche

广告合作