mcp-scan

Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.

Installation

MCP client config (paste into mcp.json)

{
  "mcpServers": {
    "npm-mcp-scan": {
      "command": "npx",
      "args": [
        "mcp-scan"
      ]
    }
  }
}

Agent install prompt

Copy and paste into Cursor / Claude / other agents to install this MCP for you

Please read this MCP repository and install it into my current environment:
https://www.npmjs.com/package/mcp-scan

Known working client config (can write into mcp.json):
{
  "mcpServers": {
    "npm-mcp-scan": {
      "command": "npx",
      "args": [
        "mcp-scan"
      ]
    }
  }
}

Please: 1) check README for deps and env vars; 2) write config for my client; 3) if secrets are missing, tell me what to fill — do not invent values.

GitHub

Related servers