Related Servers

No user-submitted related servers found.

Related Servers

• owasp-mcp-scan

  CodingSelim

  A

  license

  -Not graded

  quality

  B

  maintenance

  Passive security scanner that audits a running MCP server against the OWASP MCP Top 10 and grades it A-F. Read-only static analysis of the advertised tools, prompts and resources with console/JSON/SARIF output, and it also runs as an MCP server itself.

  Updated a month ago (2026-08-01 07:46 UTC)

  42 npm

  MIT

• agent-audit

  piiiico

  A

  license

  -Not graded

  quality

  C

  maintenance

  Security scanner for MCP servers. Detects prompt injection, command injection, auth bypass, and excessive permissions across tools, resources, and prompts.

  Updated 4 months ago (2026-05-04 22:47 UTC)

  8 npm

  2

  MIT

• mcp-audit

  andreolf

  A

  license

  -Not graded

  quality

  A

  maintenance

  npm audit for MCP servers. Point it at an MCP server and get a security grade (A–F) covering missing auth, SSRF surface, high-privilege tools, prompt-injection-prone tool descriptions, and leaked secrets.

  Updated a month ago (2026-08-18 06:26 UTC)

  12 npm

  MIT

• mcp-security-scanner

  badchars

  A

  license

  A

  quality

  C

  maintenance

  Security scanning for MCP servers from the inside out. Provides runtime inspection, AST-based static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance in a single MCP server.

  Updated 7 days ago (2026-09-09 03:24 UTC)

  55

  142 npm

  6

  MIT

• meok-mcp-injection-scan-mcp

  CSOAI-ORG

  A

  license

  A

  quality

  D

  maintenance

  Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.

  Updated 3 months ago (2026-06-19 08:18 UTC)

  5

  MIT

• mcp-security-auditor

  neoninnovationlab

  A

  license

  -Not graded

  quality

  B

  maintenance

  Zero-execution static AST security scanner and vulnerability auditor for MCP servers. Detects Command Injection (CWE-78), Path Traversal (CWE-22), Hardcoded Secrets (CWE-798), and Unauthenticated Transports (CWE-306).

  Updated 11 days ago (2026-09-04 14:52 UTC)

  MIT