MCP Tool Poisoning Scanner MCP Server

by marcepalacios12 Your server? Claim it

answering

MCP Tool Poisoning Scanner is answering right now. Last checked 10 min ago.

Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify.

Uptime history 5 days of history

5 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

346 ms

Response time

average over 24h

API key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check MCP Tool Poisoning Scanner every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-poisoning-scanner --transport http 'https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner'

Settings → Connectors → Add custom connector, then paste this address

https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner

~/.codex/config.toml

[mcp_servers.mcp-poisoning-scanner]
url = "https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-poisoning-scanner": {
      "url": "https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp-poisoning-scanner": {
      "type": "http",
      "url": "https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner	streamable-http	needs key	324 ms	10 min ago

Alternatives to MCP Tool Poisoning Scanner

same job, measured the same way

Mcpshield

by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

43 installs/wk local only

AIShield Security Scanner

by lm203688

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

77 installs/wk 10 tools local only

Tool Poisoning Scanner

by guardbee

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

814 installs/wk local only

Tool Poisoning Scanner

by 4hmetuyar

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

local only

Palanit Core

by stasxr

Scan MCP servers and agent tool manifests for poisoning, exfiltration, secrets and supply-chain risk

162 installs/wk local only

MCP security checks — WARDEN and HISTOR

by modelmarket

Scan MCP tool definitions for poisoning, look up server history, count tool-list tokens. Free.

4 tools answering

VerifyMCP

by verifymcp

Independent trust scores, tool surfaces and change history for MCP servers.

9 tools answering

MCP Trust & Tool-Poisoning Audit

by tylerscomic-lab

Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.

answering

MCP Tool Poisoning Scanner — questions

Answers built from our own checks of this server.

Why is there no tool list for MCP Tool Poisoning Scanner?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is MCP Tool Poisoning Scanner working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 346 ms. The bar chart above shows every period we have measured.

How do I connect MCP Tool Poisoning Scanner?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does MCP Tool Poisoning Scanner need an API key?

Yes. Every time we knock, MCP Tool Poisoning Scanner answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is MCP Tool Poisoning Scanner?

It answers our handshake in 346 ms on average, which is faster than 40% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.