mcp-scanner
View on GitHubScan MCP servers for potential threats & security findings.
A Python CLI, REST API, and SDK for scanning MCP servers and tools. Combines YARA rules, LLM analysis, Cisco AI Defense, and package or malware checks to identify security findings.
Use Cases
Scan MCP server tools for security threatsInspect MCP prompts, resources, and server instructionsAnalyze MCP server source code for suspicious behaviorCheck packages for known vulnerabilitiesScan bundled files for malwareRun MCP security checks in CI/CD pipelinesAudit local or remote MCP servers
Built With
- Language
- Python
- Frameworks
- Model Context Protocol · LiteLLM · YARA · FastAPI · VirusTotal · pip-audit · Tree-sitter
Tags
MCP security · security scanning · threat detection · static analysis · behavioral analysis · YARA · vulnerability scanning · malware scanning · CLI · REST API · SDK · CI/CD