mcpbeat

Heimdall MCP Server

io.github.caglarbozkurt/heimdall
local only

Heimdall runs on your own machine — the client starts it, so there is no endpoint to ping. 45 installs a week from npm. Last commit 6 Jul 2026.

Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.

Installs per day peak 453 · avg 38 · -32% w/w
a month agotoday
45
Installs / week
npm · mcp-heimdall-scan
0
Stars
0 open issues
6 Jul 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add heimdall -- npx -y mcp-heimdall-scan
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "heimdall": {
      "args": [
        "-y",
        "mcp-heimdall-scan"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.heimdall]
command = "npx"
args = ["-y", "mcp-heimdall-scan"]
.cursor/mcp.json
{
  "mcpServers": {
    "heimdall": {
      "args": [
        "-y",
        "mcp-heimdall-scan"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "heimdall": {
      "args": [
        "-y",
        "mcp-heimdall-scan"
      ],
      "command": "npx"
    }
  }
}

Heimdall — questions

Answers built from our own checks of this server.

Why is there no uptime for Heimdall?
Heimdall runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package mcp-heimdall-scan was installed 45 times last week.
How do I connect Heimdall?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls mcp-heimdall-scan straight from npm; nothing to host, nothing to sign up for.
How many people use Heimdall?
The npm package mcp-heimdall-scan was installed 45 times in the last week. Week over week that is -32%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Heimdall open source?
Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.