MCPScan

About MCPScan

The first dedicated offensive security auditor for MCP servers Threat Landscape · Checks · Install · Usage · CVEs · Output 🔥 Threat Landscape MCP has become the standard for connecting AI agents to the real world — and attackers got there first. Researchers have already documented: Compromised npm packages spawning malic

ai-security llm-security mcp mcp-security mcpscan model-context-protocol offensive-security open-source security supply-chain

Quick Facts

Stars	8
Forks	2
Language	TypeScript
Category	MCP 服务器
License	MIT
Quality Score	34.85/100
Last Updated	2026-03-12
Created	2026-03-10
Platforms	mcp, node
Est. Tokens	~200k

Compatible Skills

These tools work well together with MCPScan for enhanced workflows:

agentshield-benchmark — semantic(0.25)+complementary+rare_topics+same_lang+similar_pop+shared_platform (63%)
opena2a — semantic(0.46)+rare_topics+same_lang+similar_pop+shared_platform (60%)
cstrike — semantic(0.37)+rare_topics+same_lang+similar_pop+shared_platform (57%)
tank — semantic(0.31)+complementary+same_lang+similar_pop+shared_platform (56%)
agent-bom — semantic(0.54)+rare_topics+similar_pop+shared_platform (54%)

More MCP 服务器 Tools

Explore other popular mcp 服务器 tools:

ECC ⭐ 216.7k
n8n ⭐ 192.9k
everything-claude-code ⭐ 186.6k
dify ⭐ 145.6k
open-webui ⭐ 141.9k
gemini-cli ⭐ 105.3k
cc-switch ⭐ 103.1k
awesome-mcp-servers ⭐ 89.3k
servers ⭐ 87.4k
ragflow ⭐ 79.0k

View all MCP 服务器 tools →

Popular TypeScript Agent Tools

openclaw ⭐ 379.1k · Codex 技能
n8n ⭐ 192.9k · MCP 服务器
dify ⭐ 145.6k · MCP 服务器
gstack ⭐ 110.8k · AI 工具
gemini-cli ⭐ 105.3k · MCP 服务器

Frequently Asked Questions

What is MCPScan?

MCPScan is Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.. It is categorized as a MCP 服务器 with 8 GitHub stars.

What programming language is MCPScan written in?

MCPScan is primarily written in TypeScript. It covers topics such as ai-security, llm-security, mcp.

How do I install or use MCPScan?

You can find installation instructions and usage details in the MCPScan GitHub repository at github.com/sahiloj/MCPScan. The project has 8 stars and 2 forks, indicating an active community.

What license does MCPScan use?

MCPScan is released under the MIT license, making it free to use and modify according to the license terms.

View on GitHub → Browse MCP 服务器 tools