Skip to main content
Glama
aws-samples

MCP Security Scanner

Official
by aws-samples

Related Servers

Alternatives to MCP Security Scanner

No user-submitted related servers found.

    Related Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      Provides real-time OWASP ASVS security guidance and vulnerability scanning for AI coding agents. Enables proactive security during code generation by checking security requirements, scanning code for vulnerabilities, and suggesting secure code fixes.
      3
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Provides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.
      15 npm
      Apache 2.0
    • A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to scan code for security vulnerabilities using multiple static analysis tools, with support for filtering, deduplication, and CI/CD integration.
      27
      2
      MIT
    • A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI coding assistants to leverage Application Security Posture Management (ASPM) capabilities, allowing developers to write secure code, query security risks, trigger diff scans, and manage security findings directly from their AI assistant.
      4
      Apache 2.0

    TDQS

    A3.9/5.0

    Scored across 15 tools

    Disambiguation2/5

    Multiple tools serve overlapping purposes: scan_with_bandit, scan_with_semgrep, and scan_with_ash all analyze source code snippets, while scan_with_checkov, scan_with_trivy, and scan_with_ash overlap for IaC snippets. Similarly, directory scan variants duplicate capabilities. The descriptions clarify differences, but the boundaries between using a specialized scanner versus the aggregated ASH scanner are unclear, causing potential misselection.

    Naming Consistency5/5

    Tool names follow a consistent verb_noun pattern with snake_case: scan_with_<scanner> for snippets, scan_directory_with_<scanner> for directories, and utility verbs like get_supported_formats, check_ash_availability, generate_security_report. The naming clearly reflects the action and target.

    Tool Count4/5

    15 tools is at the upper boundary of a reasonable count, but the presence of both snippet-level and directory-level variants for the same scanner, plus an aggregated scanner (ASH) that subsumes several individual scans, makes the set feel larger than necessary. Still, the count is not excessive for the breadth of scanners covered.

    Completeness5/5

    The server covers a comprehensive range of security scanning needs: code snippets (Semgrep, Bandit, ASH), IaC (Checkov, Trivy, ASH), directories (Grype, Checkov, Bandit, Semgrep, ASH, Syft), container images (Trivy), plus discovery utilities and report generation. There are no significant dead ends; the tool set fully addresses the stated security scanner domain.

    Maintenance

    ActivityInactive
    ResponsivenessNo issues