This server scans MCP (Model Context Protocol) servers for prompt-injection, tool-poisoning, SSRF, and other security vulnerabilities using 30+ pattern rules, and provides auditing, reporting, and pricing information.

• scan_mcp_url(url): Fetches a remote MCP server's tool listing and scans each tool's name, description, and input schema against 30+ injection rules (RCE, credential exfiltration, shell metacharacters, etc.). Returns a structured report with per-tool findings, severity counts, a 0–100 score, verdict, and remediation hints (free tier: 5 scans/day).

• audit_tool_descriptions(tools_json): Scans a pasted JSON tool list directly — useful for auth-walled or offline servers — using the same full rule catalogue.

• signed_safety_report(subject, findings_json, score, note): Issues a cryptographically signed safety certificate with a public verification URL for auditors and procurement teams (Pro/Enterprise tier only).

• list_rules(): Lists all 30+ detection rules across severity tiers (CRITICAL, HIGH, MEDIUM, LOW) so you can inspect the catalogue before subscribing.

• pricing(): Shows subscription tiers (Free, Starter, Pro, Enterprise) with purchase links.

1. Click on "Install Server".

2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.

3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@meok-mcp-injection-scan-mcp scan https://example.com/mcp for vulnerabilities"

That's it! The server will respond to your query, and you can continue using it as needed.

Here is a step-by-step guide with screenshots.