- MCP Watch 🔍
MCP Watch 🔍
A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.
Overview
What is MCP Watch?
MCP Watch is a comprehensive security scanner designed to detect vulnerabilities and security issues in Model Context Protocol (MCP) servers, ensuring the integrity and safety of MCP implementations.
How to use MCP Watch?
To use MCP Watch, install it via npm and run it from the command line to scan your MCP server repositories for vulnerabilities.
Key features of MCP Watch?
- Credential Detection: Identifies hardcoded API keys and insecure credential storage.
- Tool Poisoning Detection: Scans for hidden malicious instructions in tool descriptions.
- Parameter Injection Detection: Finds magic parameters that may extract sensitive AI context.
- Prompt Injection Scanning: Detects prompt manipulation and injection attacks.
- Input Validation Checks: Identifies command injection and path traversal issues.
Use cases of MCP Watch?
- Scanning GitHub repositories for security vulnerabilities in MCP servers.
- Ensuring compliance with security best practices in AI tool implementations.
- Identifying and mitigating risks associated with credential leaks and server spoofing.
FAQ from MCP Watch?
- Can MCP Watch scan any repository?
Yes, it can scan any GitHub repository that implements MCP.
- Is MCP Watch free to use?
Yes, MCP Watch is open-source and free to use.
- How accurate is the vulnerability detection?
MCP Watch is designed to be highly accurate, but results may vary based on the complexity of the implementation.
Project Info
Created At
a year agoUpdated At
a year agoAuthor Name
kapildurapheStar
0Language
TypeScriptLicense
MIT licenseCategory
security
Recommend Servers
View AllSigstore
@3089464667
a day ago
Rollinggo Hotel Mcp
@longcreat
2 days ago
Mcp Server Chatsum
@chatmcp
summarize chat message
typescript
a year ago
Filesystem
@modelcontextprotocol
2 months ago
Memory
@modelcontextprotocol
a year ago
Test
@modelcontextprotocol
test
6 months ago
Amap Maps
@amap
高德地图官方 MCP Server
a year ago