Why this server?
Comprehensive security scanning for MCP servers with AST static analysis, config audit, dependency analysis, and OWASP MCP Top 10 compliance.
Why this server?
Zero-execution static AST security scanner and vulnerability auditor for MCP servers, detecting command injection, path traversal, hardcoded secrets, and unauthenticated transports.
Why this server?
Security auditor for MCP servers that scans tools, resources, and prompts for injection patterns and produces scored risk reports.
Why this server?
Audits MCP server configurations and packages for security risks such as typosquats, credential exposure, and malicious code without executing anything.
Why this server?
Reads a server's published source code and reports findings with file:line evidence, helping assess code security before connecting.
Why this server?
Security scanning MCP server using Semgrep integration and SARIF parsing, suitable for code security audit workflows.
Why this server?
Security linter for MCP that audits other MCP servers against MCP spec and OWASP security standards with detailed findings and remediation.
Why this server?
Security scanner for MCP servers detecting prompt injection, command injection, auth bypass, and excessive permissions across tools, resources, and prompts.
Why this server?
Security scanner for MCP servers and AI-generated code that detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F grades.