Power your agent
คำสั่งของผู้เผยแพร่เอง ไม่ใช่เอนด์พอยต์ของ PlugMCP
Host a copy with our keys and logs.
npx -y [email protected]Claude Code ไม่มีลิงก์ติดตั้งสำหรับคำสั่งแบบโลคัล ให้คัดลอกคำสั่งด้านล่างแล้วรันในเทอร์มินัล
claude mcp add mcp-scan -- npx -y mcp-scan@2.3.0รันในเทอร์มินัล
{ "mcpServers": { "mcp-scan": { "command": "npx", "args": [ "-y", "[email protected]" ] } }}claude_desktop_config.json
URL แบบรีโมตหรือคำสั่งบนเครื่องของคุณ? การติดตั้งสองแบบต่างกันอย่างไร
รันบน PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
เปิดMCP servers run with full access to your filesystem, API keys, and network. mcp-scan audits every MCP server configuration on your system, detecting leaked secrets, prompt injection risks, supply-chain vulnerabilities, and data flow issues before they become incidents.
npx mcp-scan@latest
No installation. No sign-up. No telemetry. No data leaves your machine. Supply chain scanning makes registry lookups (npm, OSV.dev, GitHub API) - disable with --offline.
Publish an MCP server yourself? Get a public badge for its README:
npx mcp-scan badge <your-npm-package-name>
Prints a ready-to-paste Markdown snippet linking to a hosted scan report at thynkq.com. The command itself makes no network calls and needs no account, but the badge image is served by thynkq.com and loads whenever someone views the README. Every scan also prints a public report link for each server it found, whether or not you publish it yourself.
MCP servers are the new attack surface for AI-powered development. They run silently alongside your AI tools with shell access, filesystem permissions, and network egress. A single malicious or misconfigured server can exfiltrate API keys, inject instructions into your AI sessions, or become a supply-chain entry point.
mcp-scan was built after analyzing hundreds of publicly available MCP server configs and finding patterns that existing security tools miss: credential relay, prompt injection via tool descriptions, typosquatting near popular packages, and data sent to unexpected endpoints.
mcp-scan automatically detects configurations for 17 AI tool clients:
.mcp-scan-policy.yml# Full security scan (auto-detects all AI tool configs)
npx mcp-scan@latest
# Output as JSON for CI/CD pipelines
npx mcp-scan@latest --json
# Privacy impact assessment and data map
npx mcp-scan@latest privacy
# Compliance report (SOC 2, GDPR, HIPAA, PCI-DSS, NIST 800-53)
npx mcp-scan@latest compliance
# Software Bill of Materials (CycloneDX or SPDX)
npx mcp-scan@latest sbom
# Public scan badge and report link for an npm package
npx mcp-scan@latest badge <package-name>
# Validate custom security policies
npx mcp-scan@latest policy validate
# CI mode: exit 1 on CRITICAL or HIGH findings (plain scans report without failing)
npx mcp-scan@latest --ci --severity high
# Interactive TUI dashboard (blessed/blessed-contrib install as optional
# dependencies; if the install was skipped, this prints an install hint)
npx mcp-scan@latest dashboard
Add mcp-scan to any CI pipeline via npx. Emits SARIF 2.1.0 which GitHub, GitLab, and most security tools pick up:
# GitHub Actions example
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: 20
- run: npx mcp-scan@latest --sarif mcp-scan.sarif --severity medium
- uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: mcp-scan.sarif
GitLab CI, CircleCI, or any runner works. npx mcp-scan is the portable entrypoint.
Define your own rules in .mcp-scan-policy.yml:
version: 1
rules:
- id: block-external-secrets
description: Block any server that leaks secrets to unknown endpoints
action: block
match:
finding_id: ["exposed-secret", "exfiltration-vector"]
- id: escalate-supply-chain
description: Treat low-trust packages as critical
action: override-severity
severity: critical
match:
finding_id: supply-chain-low-trust
- id: allow-local-network
description: Skip unknown-endpoint findings for local development
action: skip
match:
finding_id: network-egress-unknown
category: ["localhost", "127.0.0.1"]
- id: warn-on-pii
description: Flag any server that handles card data
action: warn
match:
severity: critical
category: ["credit card"]
Rules need id + action (block, warn, skip, override-severity).
Match keys: server_name, finding_id, severity, category (substring of the finding text), license_type (the server's package license, exact match, case-insensitive). Any other key (in a rule or in match), an empty value, or a severity that isn't info, low, medium, high or critical, is an error.
Validate with mcp-scan policy validate.
A policy file that exists but can't be used stops the scan (error on stderr naming the file, exit 1) instead of running without it. That covers an unparseable .mcp-scan.json or .mcp-scan-policy.yml, a wrong-typed field ("blockedPackages": "x"), a YAML policy that fails policy validate, and --policy <path> pointing at a missing file. No policy file at all is fine; the scan runs with defaults.
mcp-scan runs locally on your machine. Config parsing, regex scanning, and all heuristics happen in-process. The only network calls are optional supply-chain lookups (npm registry, OSV.dev for CVEs, GitHub API for trust scoring), which can be disabled with --offline.
--offlinemcp-scan fingerprints every server it scans and compares the next scan against that baseline (~/.mcp-scan/known-servers.json, or $MCP_SCAN_HOME). The baseline is signed so that an ordinary edit or removal is detected (the limits are listed below):
~/.mcp-scan/baseline.key, created with mode 0600 on the first scan and never stored in the baseline.server-mutation at MEDIUM for every server. The bad file is renamed to known-servers.json.corrupt-<time> and a new baseline is built. A missing or damaged key is replaced with a new one; a readable key is kept.audit.log whether it left a signed baseline, so an unsigned store on an install that signed before is reported as tampered, not as an upgrade.~/.mcp-scan in a CI cache, cache baseline.key with known-servers.json. A store restored without its key is reported as tampered.What this does not stop: anyone running as your user can read baseline.key, so they can re-sign a forged store. They can also delete the key, the store and the audit log together and look like a first run, or rewrite the store without a signature, delete the key, and edit the audit log, which reads as the one-time upgrade and gets only an INFO. The audit log rotates at 10 MB, and a rotated log no longer vouches for earlier signing. It catches casual edits, scripts that rewrite the store, and deletion that leaves other traces. It does not defend against an attacker with full access to your account. For that, keep the baseline somewhere that account cannot write, or compare scan output in CI.
Use without installing (always latest version):
npx mcp-scan@latest
Install globally:
npm install -g mcp-scan
mcp-scan
Install on macOS via Homebrew:
brew tap Abanoub-Rodolf/mcp-scan
brew install mcp-scan
mcp-scan itself is free and MIT. When a scan finds something that needs a
decision, two paid options exist. Neither is required to use the scanner:
Issues and PRs welcome. See CONTRIBUTING.md for guidelines.
For security disclosures: see SECURITY.md.
MIT. Built by Abanoub Rodolf Boctor · ThynkQ
Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17
{ "mcpServers": { "mcp-scan": { "command": "npx", "args": [ "-y", "[email protected]" ] } }}ภาพรวม
Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.
เครื่องมือ
ยังไม่มีรายการเครื่องมือ เซิร์ฟเวอร์แบบรีโมตจะได้รายการหลังการตรวจสอบสถานะครั้งแรก
FAQ
คัดลอกคอนฟิก stdio สำหรับ Cursor, Claude Desktop, Claude Code หรือ VS Code ได้ในหน้านี้ คอนฟิกนี้ใช้การติดตั้งของผู้เผยแพร่ ไม่ใช่พร็อกซีของ PlugMCP
ระเบียนนี้ไม่ได้ระบุตัวแปรสภาพแวดล้อมที่จำเป็น
MCP Scan ทำงานแบบโลคัลผ่าน stdio
ตรวจสอบล่าสุดเมื่อ 2026-11-14 Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.