mcpbeat

mcp-scan MCP Server

io.github.CodingSelim/mcp-scan
local only

mcp-scan runs on your own machine — the client starts it, so there is no endpoint to ping. 48 installs a week from npm. Last commit 12 Jul 2026.

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Installs per day peak 257 · avg 13 · +17% w/w
a month agotoday
48
Installs / week
npm · owasp-mcp-scan
0
Stars
0 open issues
12 Jul 2026
Last commit
0 releases in 90 days
MIT
License
TypeScript

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-scan -- npx -y owasp-mcp-scan
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-scan": {
      "args": [
        "-y",
        "owasp-mcp-scan"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-scan]
command = "npx"
args = ["-y", "owasp-mcp-scan"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-scan": {
      "args": [
        "-y",
        "owasp-mcp-scan"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "mcp-scan": {
      "args": [
        "-y",
        "owasp-mcp-scan"
      ],
      "command": "npx"
    }
  }
}

mcp-scan — questions

Answers built from our own checks of this server.

Why is there no uptime for mcp-scan?
mcp-scan runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package owasp-mcp-scan was installed 48 times last week.
How do I connect mcp-scan?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls owasp-mcp-scan straight from npm; nothing to host, nothing to sign up for.
How many people use mcp-scan?
The npm package owasp-mcp-scan was installed 48 times in the last week. Week over week that is +17%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is mcp-scan open source?
Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.