A
licenseNot graded
qualityD
maintenanceSecurity auditor for MCP servers that enumerates tools, resources, and prompts, scans for injection patterns, classifies risk levels, and produces a scored report (0-100, grades A-F).
32 PyPI
2
MIT
Kadent Scan
by so.kadent
Server Details
Free, read-only security scanner for remote MCP servers, before you connect them.
If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
A4.7/5.0
Scored across 1 tool
Disambiguation5/5
There is only one tool, so no ambiguity or overlap exists. An agent cannot confuse it with anything else in the set.
Naming Consistency5/5
The single tool name scan_mcp_server follows a clear verb_noun pattern and is internally consistent. There are no mixed conventions to create confusion.
Tool Count5/5
The server's sole purpose is to perform a security scan, and one well-defined tool fully satisfies that purpose. Adding extra tools would be unnecessary bloat.
Completeness5/5
The tool covers the entire advertised workflow: handshake, tool listing, capability rating, prompt-injection detection, and the lethal-trifecta check. No obvious missing operation is needed for the stated domain.
Available Tools
1 toolscan_mcp_serverScan an MCP server for security risksARead-onlyInspect
Runs a free, read-only security scan of a remote MCP server before you connect it. Performs an ordinary MCP handshake (never anything more invasive), lists the server's tools, rates each one's capabilities (private-data access, untrusted content, network egress, destructive actions), flags prompt-injection patterns in tool descriptions, and reports whether the lethal trifecta is reachable. Scan only servers you run or are entitled to connect to.
Inputs: url (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Scans an MCP server for security gaps before your agent connects. Free tier, no signup.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
2,000+ MCP servers read at source level. Know what one does before you connect. Free, no key.
Related MCP Servers
- AlicenseAqualityBmaintenanceSecurity scanner for MCP servers: detects tool poisoning, hidden instructions, tool shadowing, excessive permissions, leaked secrets and weak transports before you install a server.4118 npmApache 2.0
- FlicenseNot gradedqualityFmaintenanceScans MCP servers for security hardening issues including capability declarations, transport, and tool descriptions.1-
- AlicenseNot gradedqualityBmaintenanceLets an agent inspect and audit MCP servers before connecting to them, checking their exposed tools, prompts and resources for tool poisoning, shadowing, excessive permissions, leaked secrets and unsafe transports against 24 deterministic rules. Results are returned as findings with evidence, remediation and CWE/OWASP references, and can fail CI with SARIF, Markdown or standalone HTML reports.118 npmApache 2.0
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.