Skip to main content
Glama
willianpinho

mcp-gateway-scan

by willianpinho
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to mcp-gateway-scan

  • RAD Security by rad-security

    RAD Securityofficial

    rad-security
    A
    license
    C
    quality
    A
    maintenance
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    65
    290 npm
    6
    MIT

  • trust-security

    Jaden-JJH
    A
    license
    Not graded
    quality
    A
    maintenance
    Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.
    2
    MIT

  • mcp-audit

    daerda
    A
    license
    Not graded
    quality
    D
    maintenance
    A frontend security dependency auditing tool that identifies vulnerabilities in local and remote repositories using the Model Context Protocol. It provides detailed audit information like CVSS scores and dependency chains, generating standardized markdown reports.
    3 npm
    MIT

  • mcp-security-toolkit

    x0base
    A
    license
    A
    quality
    C
    maintenance
    14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.
    14
    MIT

Related Servers

  • yotta-verify-mcp by YottaMeta

    yotta-verify-mcpofficial

    YottaMeta
    A
    license
    Not graded
    quality
    B
    maintenance
    Provides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.
    707 npm
    MIT

  • Obra CTO

    lilycip
    A
    license
    A
    quality
    D
    maintenance
    A local-first MCP server that scores your codebase's Build Readiness by reading code and running tests on your machine, outputting a diligence-grade score and risk register without uploading your source.
    5
    53 npm
    Apache 2.0

  • TaskBounty Check

    eliottreich
    A
    license
    A
    quality
    C
    maintenance
    Local-only GitHub Actions and CI maintenance scanner for AI-built apps. Exposes scan, explanation, and fix-planning tools to MCP clients; modifies nothing and makes no outbound requests by default.
    3
    51 npm
    2
    MIT

  • toolfence

    dhb520cat
    A
    license
    A
    quality
    A
    maintenance
    Enables agents and CI pipelines to audit MCP servers and agent tool-chains by statically scanning repositories, local checkouts, tools/list exports, or live endpoints for risks such as destructive actions without confirmation, mismatched safety annotations, injection surfaces, credential or PII exposure, and unguarded command, path, or URL sinks. All checks are read-only and never execute the scanned code or call tools/call.
    3
    MIT

  • MCP Shield

    rob925
    A
    license
    C
    quality
    B
    maintenance
    Security scanner and MCP server that catches dangerous patterns in MCP servers and AI agent projects, such as leaked secrets, shell execution, and prompt-injection text. Runs as both a CLI and MCP server with CI-friendly severity gates.
    2
    1
    MIT
Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.6/5.0

Scored across 1 tool

Disambiguation5/5

With only one tool, there is no possibility of confusion between tools. The tool's purpose is clearly described and distinct from any other potential tools.

Naming Consistency5/5

The single tool name 'scan_gateway' follows a clear verb_noun pattern. Naming consistency is perfect as there is only one name.

Tool Count3/5

One tool for a domain that covers 7 dimensions feels slightly thin; a more granular breakdown into separate tools for each dimension might improve flexibility, but the single tool is comprehensive.

Completeness5/5

The tool covers all 7 gateway-readiness dimensions comprehensively, providing a full static scan without obvious gaps. It is read-only, which is appropriate for scanning.

Maintenance

ActivityStale
ResponsivenessNo issues

Resources