MCP Server Security Scanner

by vpatser1

local only

MCP Server Security Scanner runs on your own machine — the client starts it, so there is no endpoint to ping. 6 installs a week from npm.

Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs

Installs / week

npm · mcp-server-security-scanner

—

Stars

on GitHub

—

Last commit

0 releases in 90 days

—

License

language unknown

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-server-security-scanner -- npx -y mcp-server-security-scanner

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-server-security-scanner": {
      "args": [
        "-y",
        "mcp-server-security-scanner"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp-server-security-scanner]
command = "npx"
args = ["-y", "mcp-server-security-scanner"]

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-server-security-scanner": {
      "args": [
        "-y",
        "mcp-server-security-scanner"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "mcp-server-security-scanner": {
      "args": [
        "-y",
        "mcp-server-security-scanner"
      ],
      "command": "npx"
    }
  }
}

Alternatives to MCP Server Security Scanner

same job, measured the same way

Mcpshield

by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

39 installs/wk local only

MCP Safeguard

by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

97 installs/wk local only

AI Security Gateway — MCP Gateway

by aisecuritygateway

Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.

answering

GuardianShield

by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

121 installs/wk local only

mcp-armor

by studiomeyer

Security sidecar for MCP servers: prompt-injection scan, Ed25519 verify, tools/list drift. 10 tools.

local only

Shellward

by jnmetacode

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

48 installs/wk local only

Agent Security Scanner

by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

201 installs/wk local only

Mund — MCP Security Scanner

by tyox-all

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

102 installs/wk local only

MCP Server Security Scanner — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP Server Security Scanner?

MCP Server Security Scanner runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package mcp-server-security-scanner was installed 6 times last week.

How do I connect MCP Server Security Scanner?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls mcp-server-security-scanner straight from npm; nothing to host, nothing to sign up for.

How many people use MCP Server Security Scanner?

The npm package mcp-server-security-scanner was installed 6 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.