mcp-scan

Indexed by io.github.CodingSelim

About

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Use this server

Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.

Transportstdio (runs a local command)

Claude Code

claude mcp add mcp-scan -- npx owasp-mcp-scan

Cursor

Add to Cursor

If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.

VS Code

code --add-mcp '{"name":"mcp-scan","command":"npx","args":["owasp-mcp-scan"]}'

JSON

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "owasp-mcp-scan"
      ]
    }
  }
}