MCP-Scan: An MCP Security Scanner

Created By

invariantlabs-ai7 months ago

A security scanning tool for MCP servers

Overview

what is MCP-Scan?

MCP-Scan is a security scanning tool designed to check installed MCP servers for common security vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.

how to use MCP-Scan?

To use MCP-Scan, run the command uvx mcp-scan@latest in your terminal to initiate the scanning process on your MCP server configurations.

key features of MCP-Scan?

Scans for prompt injection attacks in tool descriptions.
Detects cross-origin escalation attacks.
Tool pinning to prevent MCP rug pull attacks.
Inspecting tool descriptions of installed tools.

use cases of MCP-Scan?

Identifying security vulnerabilities in MCP server configurations.
Ensuring the integrity of tools used in MCP environments.
Preventing potential security breaches through proactive scanning.

FAQ from MCP-Scan?

What types of vulnerabilities does MCP-Scan check for?

MCP-Scan checks for prompt injections, tool poisoning, and cross-origin escalations.

Is my data safe when using MCP-Scan?

Yes, MCP-Scan does not store or log any usage data, ensuring your configurations remain private.

How can I contribute to MCP-Scan?

Contributions are welcome! You can open an issue on the GitHub repository for suggestions or bug reports.

Project Info

Created At

7 months ago

Updated At

7 months ago

Author Name

invariantlabs-ai

Star

610

Language

Python

License

Apache-2.0 license

Recommend Servers

View All

Discourse Mcp Server

@Civilized Discourse Construction Kit

A Model Context Protocol (MCP) stdio server that exposes Discourse forum capabilities as tools for AI agents. Works with all deployments of discourse.org, self hosted or cloud hosted. just generate an API key to connect.

4 days ago

Jina AI MCP Tools

@PsychArch

A Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

JavaScript

6 months ago

EverArt

@modelcontextprotocol

AI image generation using various models

7 months ago

GitLab

@modelcontextprotocol

GitLab API, enabling project management

8 months ago

Memory

@modelcontextprotocol

5 months ago

Context7

@upstash

Context7 MCP Server -- Up-to-date code documentation for LLMs and AI code editors

JavaScript

2 months ago

Slack

@modelcontextprotocol

Channel management and messaging capabilities

6 months ago

Fetch

@test

Web content fetching and conversion for efficient LLM usage

a month ago

Mailtrap Email Sending MCP

@Mailtrap

An MCP server that provides a tool for sending transactional emails via Mailtrap

7 months ago

Github

@modelcontextprotocol

Repository management, file operations, and GitHub API integration

5 months ago

Qiniu MCP Server

@Qiniu

基于七牛云产品构建的 Model Context Protocol (MCP) Server，支持用户在 AI 大模型客户端的上下文中通过该 MCP Server 来访问七牛云存储资源、利用 Dora 服务进行图片操作等。如果有什么需求欢迎在下方评论，您也可以在 github 仓库中提 issue。

Python

7 months ago

Zhipu Web Search

@BigModel

Zhipu Web Search MCP Server is a search engine specifically designed for large models. It integrates four search engines, allowing users to flexibly compare and switch between them. Building upon the web crawling and ranking capabilities of traditional search engines, it enhances intent recognition capabilities, returning results more suitable for large model processing (such as webpage titles, URLs, summaries, site names, site icons, etc.). This helps AI applications achieve "dynamic knowledge acquisition" and "precise scenario adaptation" capabilities.

6 months ago

Aws Kb Retrieval Server

@modelcontextprotocol

An MCP server implementation for retrieving information from the AWS Knowledge Base using the Bedrock Agent Runtime.

7 months ago

Test

@modelcontextprotocol

test

7 days ago

Usa Spending

@Tom

You can track government spending over time, search government spending by agency, explore government spending to communities, and much more. While knowing the data is reliable since all data comes from the official source of government spending data.

9 hours ago

Firecrawl Mcp Server

@mendableai

Official Firecrawl MCP Server - Adds powerful web scraping to Cursor, Claude and any other LLM clients.

JavaScript

5 months ago

Search1API

One API for Search, Crawling, and Sitemaps

6 months ago

Saifsai

an hour ago

Filesystem

Secure file operations with configurable access controls

8 months ago

Aiimagemultistyle

@codecraftm

A Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.

5 months ago

MiniMax MCP

@MiniMax-AI

Official MiniMax Model Context Protocol (MCP) server that enables interaction with powerful Text to Speech, image generation and video generation APIs.

Python

7 months ago

Testingbot Mcp Server

@testingbot

The TestingBot MCP server allows you to take screenshots of your website on multiple browsers and operating systems. Create CDP sessions and interface with the TestingBot service.

a day ago

Bucket Feature Flags MCP Server

@bucketco

Flag features directly from chat in your code editor, including VS Code, Cursor, Windsurf, Claude Code—any IDE with MCP support.

6 months ago

OpenProject MCP

@AndyEverything

A Model Context Protocol (MCP) server that provides seamless integration with OpenProject API v3.

a day ago

a day ago

a day ago

BlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.

8 months ago

AgentQL MCP Server

@tinyfish-io

Model Context Protocol server that integrates AgentQL's data extraction capabilities.

JavaScript

7 months ago

Ahammedshaik

2 days ago

Google Maps

@modelcontextprotocol

Location services, directions, and place details

8 months ago