AIBase
EN
Explore
MCP Scan
M

MCP Scan

MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.
SecurityDeveloper tools#Security scanning#MCP tool#Vulnerability detection#AI security.Python
5 points
18.9K
Open Site

Overview

Content Details

Alternatives

What is MCP-Scan?

MCP-Scan is a tool for detecting potential security issues in tools, prompts, and resources on MCP servers. It can identify common security vulnerabilities, such as prompt injection attacks, tool poisoning attacks, and cross-domain escalation attacks.

How to use MCP-Scan?

After running the MCP-Scan command, it will automatically scan your MCP configuration files and generate a report.

Applicable scenarios

Suitable for developers and enterprise users who need to regularly check the security of MCP servers.

Main features

Support for multiple MCP clients
Supports configuration scanning for file-based MCP clients such as Claude, Cursor, and Windsurf.
Detect prompt injection attacks
Detect prompt injection attacks through local checks and by calling the Invariant Guardrails API.
Detect tool poisoning attacks
Detect tool poisoning attacks through tool hash values to prevent MCP tools from being tampered with.
Tool locking function
Lock tools through hash values to prevent them from being accidentally replaced.
Advantages
Quickly detect security issues on MCP servers.
Support configuration for multiple MCP clients.
Enhance detection capabilities through API calls.
Limitations
Requires connection to an external API for advanced detection.
May involve sharing of tool description data.

How to use

Install MCP-Scan
Install the MCP-Scan tool via npm or uvx.
Run a scan
Run the command to scan the MCP configuration files.
View results
Fix any discovered security issues based on the generated report.

Usage examples

Scan default configurations
Scan all known MCP configuration files.
Check specific configurations
Run a scan against a specific configuration file.
Add to whitelist
Add a specific tool to the whitelist.

Frequently Asked Questions

Does MCP-Scan store my data?
How to disable tool poisoning detection?
Which MCP clients does MCP-Scan support?

Related resources

MCP-Scan official documentation
The GitHub repository for MCP-Scan.
Invariant Guardrails
A tool for security detection.
MCP security notification
An article about MCP security issues.

Installation

Copy the following command to your Client for configuration
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

R
Rsdoctor
Rsdoctor is a build analysis tool specifically designed for the Rspack ecosystem, fully compatible with webpack. It provides visual build analysis, multi - dimensional performance diagnosis, and intelligent optimization suggestions to help developers improve build efficiency and engineering quality.
TypeScript
9.4K
5 points
N
Next Devtools MCP
The Next.js development tools MCP server provides Next.js development tools and utilities for AI programming assistants such as Claude and Cursor, including runtime diagnostics, development automation, and document access functions.
TypeScript
10.1K
5 points
T
Testkube
Testkube is a test orchestration and execution framework for cloud-native applications, providing a unified platform to define, run, and analyze tests. It supports existing testing tools and Kubernetes infrastructure.
Go
5.6K
5 points
M
MCP Windbg
An MCP server that integrates AI models with WinDbg/CDB for analyzing Windows crash dump files and remote debugging, supporting natural language interaction to execute debugging commands.
Python
9.2K
5 points
R
Runno
Runno is a collection of JavaScript toolkits for securely running code in multiple programming languages in environments such as browsers and Node.js. It achieves sandboxed execution through WebAssembly and WASI, supports languages such as Python, Ruby, JavaScript, SQLite, C/C++, and provides integration methods such as web components and MCP servers.
TypeScript
9.6K
5 points
N
Netdata
Netdata is an open-source real-time infrastructure monitoring platform that provides second-level metric collection, visualization, machine learning-driven anomaly detection, and automated alerts. It can achieve full-stack monitoring without complex configuration.
Go
10.2K
5 points
M
MCP Server
The Mapbox MCP Server is a model context protocol server implemented in Node.js, providing AI applications with access to Mapbox geospatial APIs, including functions such as geocoding, point - of - interest search, route planning, isochrone analysis, and static map generation.
TypeScript
8.2K
4 points
U
Uniprof
Uniprof is a tool that simplifies CPU performance analysis. It supports multiple programming languages and runtimes, does not require code modification or additional dependencies, and can perform one-click performance profiling and hotspot analysis through Docker containers or the host mode.
TypeScript
8.4K
4.5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
22.9K
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
20.2K
4.5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
64.4K
4.3 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
31.3K
5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
28.3K
5 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
59.8K
4.5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
19.8K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
43.5K
4.8 points
AIBase
Zhiqi Future, Your AI Solution Think Tank
English简体中文繁體中文にほんご
© 2026AIBase