MCP Fortress

Server Details

Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

3 tools

analyze_prompt_injectionTry in Inspector

Analyze tool descriptions and prompts for prompt injection vulnerabilities

ParametersJSON Schema

Name	Required	Description
`context`	No	Additional context about how the tool is used (optional)
`tool_name`	Yes	Name of the tool being analyzed
`tool_description`	Yes	Description or prompt text to analyze

detect_tool_poisoningTry in Inspector

Detect if a tool name or description appears malicious, misleading, or designed to shadow legitimate tools

ParametersJSON Schema

Name	Required	Description
`tool_name`	Yes	Name of the tool to check
`similar_tools`	No	List of similar legitimate tool names (optional)
`tool_description`	Yes	Description of what the tool claims to do

scan_mcp_serverTry in Inspector

Scan an MCP server package for security vulnerabilities, threats, and malicious code patterns

ParametersJSON Schema

Name	Required	Description
`version`	No	Specific version to scan (optional, defaults to latest)
`server_name`	Yes	MCP server package name (e.g., @modelcontextprotocol/server-filesystem)
`include_dependencies`	No	Whether to check dependencies for vulnerabilities (default: true)

How do I claim this server?

To claim this server, publish a /.well-known/glama.json file on your server's domain with the following structure:

{ "$schema": "https://glama.ai/mcp/schemas/connector.json", "maintainers": [ { "email": "your-email@example.com" } ] }

The email address must match the email associated with your Glama account. Once verified, the server will appear as claimed by you.

What are the benefits of claiming a server?