SecurityStack MCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| DEPSCAN_API_KEY | No | API key for dependency scanning. Required to enable the check_dependencies tool. | |
| SECRETSCAN_API_KEY | No | API key for backend secret scanning. Optional; scan_secrets works offline without it. | |
| SECURITYSCAN_API_KEY | No | API key for security scanning. Required to enable the scan_skill tool. | |
| ACTIVESCANNER_API_KEY | No | API key for the active scanner. Required to enable the network_scan tool. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| extensions | {
"io.modelcontextprotocol/ui": {}
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| scan_skillA | Analyze an AI agent skill for prompt injection, malware patterns, and OWASP LLM Top 10 issues BEFORE installing it (SecurityScan). |
| check_dependenciesB | Check the health of your agent's external dependencies: uptime, SSL validity, blacklist status, and a trust score 0-100 (DepScan). |
| network_scanA | Active security scan of a device or host with an autonomous AI agent that decides which follow-up probes to run (ActiveScanner). Only scan targets you own or have permission to test. |
| audit_mcp_server_configA | Audit an MCP client configuration for security risks — works offline, no external service required. Detects: tool poisoning, hidden/coercive instructions in tool descriptions, hardcoded credentials, unpinned packages (rug-pull risk), insecure transport, and toxic capability combinations (shell + network, file-read + network). |
| scan_secretsA | Scan a text payload (a prompt, an outbound API body, a file's contents) for secrets and PII BEFORE it leaves for an LLM or external API, and return a redacted copy. Catches the #1 real-world agent incident: secrets/PII leaking into a model's context. WORKS OFFLINE with no API key — the detection runs in-process (pure regex
|
| full_stack_auditA | Complete security posture in one call: audits the MCP config, checks dependency health, analyzes an untrusted skill, scans the local network gateway, and scans any payload you're about to send out for secrets/PII — then correlates everything into a single prioritized report. Pass only what you have; each section is skipped gracefully if its input or service is missing. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 6 tools
Each tool addresses a distinct security concern: skill scanning, dependency health, network probing, MCP config auditing, and secrets/PII detection. The full_stack_audit is clearly a composite that calls the others, so there's no confusion about when to use individual tools vs. the aggregate.
Most tools follow a verb_noun pattern (scan_skill, check_dependencies, audit_mcp_server_config, scan_secrets). However, network_scan and full_stack_audit invert the order, making the pattern slightly inconsistent.
With 6 tools, the set is well-scoped for a security-focused server, covering different attack surfaces without unnecessary bloat. Each tool earns its place and the count falls comfortably within the ideal range.
The tool set covers a broad range of security checks relevant to AI agent workflows, including skills, dependencies, network, MCP configuration, and data leakage. The full_stack_audit tool aggregates all checks, providing a complete posture assessment in one call. No obvious gaps exist for the stated purpose.