mcpbeat Sign in

Scout Security MCP Server

local only

Scout Security runs on your own machine — the client starts it, so there is no endpoint to ping. 100 installs a week from pypi. Last commit 25 Jul 2026.

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

Installs per day peak 83 · avg 21 · -31% w/w
a month agotoday
100
Installs / week
pypi · scout-security
0
Stars
0 open issues
25 Jul 2026
Last commit
from GitHub
—
License
Python

What the code does

We read the source, 2 d ago · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

        "(e.g., `; rm -rf /`).",
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command scout-vscode/src/extension.ts:22
    execFile(
                    proc = subprocess.run(  # noqa: S603 — fixed argv, absolute exe, no shell

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Scout Security and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add scout -- uvx scout-security
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "scout": {
      "command": "uvx",
      "args": [
        "scout-security"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.scout]
command = "uvx"
args = ["scout-security"]
.cursor/mcp.json
{
  "mcpServers": {
    "scout": {
      "command": "uvx",
      "args": [
        "scout-security"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "scout": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "scout-security"
      ]
    }
  }
}

Alternatives to Scout Security

same job, measured the same way
Eleion Scanner
by hernaninverso

Register/verify your domains, queue security scans, and read findings (CVE, severity).

35 installs/wk local only
SkillTotal
by skilltotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

5 749 installs/wk local only
Guardvibe
by goklab

Deterministic security layer your AI can't be. 639 rules, 39 tools, CLI + doctor + host audit.

1 673 installs/wk local only
Enoki
by enokilabs

Test your AI agents for security and safety weaknesses, and re-verify the fixes.

answering
Python Code Validator
by jkanselaar

Validates AI-generated Python: syntax, lint, security scan and deterministic repair.

3 tools answering
ZeroDOM
by devhusnainai

The deterministic attack-surface perception layer for AI security agents

905 installs/wk local only
Aguara MCP
by garagon

Security scanner for AI agent skills and MCP servers

local only
GSC Scanner
by poliakarmai

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

local only

Scout Security — questions

Answers built from our own checks of this server.

Why is there no uptime for Scout Security?
Scout Security runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package scout-security was installed 100 times last week.
How do I connect Scout Security?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls scout-security straight from pypi; nothing to host, nothing to sign up for.
How many people use Scout Security?
The pypi package scout-security was installed 100 times in the last week. Week over week that is -31%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Scout Security open source?
We cannot say either way: written in Python and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.