mcpbeat Sign in

Bawbel Scanner MCP Server

local only

Bawbel Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 176 installs a week from pypi. Last commit 27 Jun 2026.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Installs per day peak 98 · avg 33 · +45% w/w
a month agotoday
176
Installs / week
pypi · bawbel-scanner
10
Stars
3 open issues
27 Jun 2026
Last commit
0 releases in 90 days
License
Python

What the code does

We read the source, 20 h ago · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

    ("Recursive delete (rm -rf)", "AVE-2026-00005", "CRITICAL", 5.6),
Reads secrets and sends them out [пакет] scanner/engines/sandbox_engine.py:57
    ("Read of ~/.ssh/ directory", "AVE-2026-00003", "HIGH", 6.8),
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

            result = subprocess.run(  # nosec B603 B607  # noqa: S603
    ("Read of ~/.ssh/ directory", "AVE-2026-00003", "HIGH", 6.8),
    ("Outbound connection to pastebin.com", "AVE-2026-00001", "CRITICAL", 8.0),

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Bawbel Scanner and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add scanner -- uvx bawbel-scanner
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "scanner": {
      "args": [
        "bawbel-scanner"
      ],
      "command": "uvx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.scanner]
command = "uvx"
args = ["bawbel-scanner"]
.cursor/mcp.json
{
  "mcpServers": {
    "scanner": {
      "args": [
        "bawbel-scanner"
      ],
      "command": "uvx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "scanner": {
      "args": [
        "bawbel-scanner"
      ],
      "command": "uvx"
    }
  }
}

Alternatives to Bawbel Scanner

same job, measured the same way
Bawbel Scanner
by bawbel

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

local only
Bawbel Scanner
by bawbel

Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.

79 installs/wk local only
MCPAmpel - MCP Security Scanner
by diemoeve

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

69 installs/wk local only
Mcpshield
by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

42 installs/wk local only
Mund — MCP Security Scanner
by tyox-all

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

48 installs/wk local only
Agent Security Scanner MCP
by sinewaveai

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

728 installs/wk local only
Synapse Audit
by digidenone

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

28 installs/wk local only
Black Duck Security Scanner
by blackduck

AI-powered security scanning using Black Duck Signal for vulnerability detection.

241 installs/wk local only

Bawbel Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for Bawbel Scanner?
Bawbel Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package bawbel-scanner was installed 176 times last week.
How do I connect Bawbel Scanner?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls bawbel-scanner straight from pypi; nothing to host, nothing to sign up for.
How many people use Bawbel Scanner?
The pypi package bawbel-scanner was installed 176 times in the last week. Week over week that is +45%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Bawbel Scanner open source?
We cannot say either way: written in Python, 10 stars on GitHub and 3 open issues, but we could not determine the licence, and without one the code is not open source by default.