Skip to main content
Glama
Sign In
willianpinho

mcp-gateway-scan

by willianpinho
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to mcp-gateway-scan

  • RAD Security by rad-security

    RAD Securityofficial

    rad-security
    A
    license
    C
    quality
    B
    maintenance
    CP server for RAD Security, providing AI-powered security insights for Kubernetes and cloud environments. This server provides tools for querying the Rad Security API and retrieving security findings, reports, runtime data and many more.
    65
    526 npm
    7
    MIT

  • trust-security

    Jaden-JJH
    A
    license
    Not graded
    quality
    A
    maintenance
    Detect live website vulnerabilities and security flaws in GitHub repositories using automated DAST and SAST scanning. Safeguard applications by identifying exposed secrets, insecure dependencies, and common code patterns prone to exploitation. Receive structured fix plans with precise code remediation steps to resolve identified risks and improve security posture.
    2
    MIT

  • mcp-audit

    daerda
    A
    license
    Not graded
    quality
    D
    maintenance
    A frontend security dependency auditing tool that identifies vulnerabilities in local and remote repositories using the Model Context Protocol. It provides detailed audit information like CVSS scores and dependency chains, generating standardized markdown reports.
    8 npm
    MIT

  • mcp-security-toolkit

    x0base
    A
    license
    A
    quality
    C
    maintenance
    14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.
    14
    MIT

Related Servers

  • Argus

    fpavia111-creator
    A
    license
    Not graded
    quality
    B
    maintenance
    Runs read-only, offline static scans of the local machine's MCP server configs and agent skill folders, surfacing prompt injection, hidden Unicode, dangerous commands, credential paths, hardcoded secrets, unpinned packages, and over-broad filesystem or transport scope as text, JSON, SARIF, or HTML reports an agent can act on. Also allows scanning a single downloaded skill folder or a saved tools/list JSON so an agent can vet third-party components before installing them.
    40 npm
    MIT
  • yotta-verify-mcp by YottaMeta

    yotta-verify-mcpofficial

    YottaMeta
    A
    license
    Not graded
    quality
    B
    maintenance
    Provides a deterministic pre-install security scan for Agent skills, plugins, and MCP servers via stdio, returning verdicts, audited badges, CI gates, and reports without executing code or making network calls.
    99 npm
    MIT

  • mcpscan

    fpavia111-creator
    A
    license
    Not graded
    quality
    B
    maintenance
    A read-only MCP server that lets an agent audit its own environment by discovering local MCP configurations and skill folders on Windows, macOS, and Linux and running offline static checks for prompt injection, hidden instructions, hardcoded secrets, dangerous commands, unpinned packages, and excessive filesystem or transport permissions. It exposes tools to scan everything discovered, list configurations, vet a single skill, or analyze supplied text, returning text, JSON, SARIF, or HTML findings with CI-friendly severity levels.
    14 npm
    MIT

  • Obra CTO

    lilycip
    A
    license
    A
    quality
    D
    maintenance
    A local-first MCP server that scores your codebase's Build Readiness by reading code and running tests on your machine, outputting a diligence-grade score and risk register without uploading your source.
    5
    59 npm
    Apache 2.0

  • TaskBounty Check

    eliottreich
    A
    license
    A
    quality
    C
    maintenance
    Local-only GitHub Actions and CI maintenance scanner for AI-built apps. Exposes scan, explanation, and fix-planning tools to MCP clients; modifies nothing and makes no outbound requests by default.
    3
    35 npm
    2
    MIT

  • toolfence

    dhb520cat
    A
    license
    A
    quality
    A
    maintenance
    Enables agents and CI pipelines to audit MCP servers and agent tool-chains by statically scanning repositories, local checkouts, tools/list exports, or live endpoints for risks such as destructive actions without confirmation, mismatched safety annotations, injection surfaces, credential or PII exposure, and unguarded command, path, or URL sinks. All checks are read-only and never execute the scanned code or call tools/call.
    3
    MIT
Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.6/5.0

Scored across 1 tool

Disambiguation5/5

With only one tool, there is no possibility of confusion between tools. The tool's purpose is clearly described and distinct from any other potential tools.

Naming Consistency5/5

The single tool name 'scan_gateway' follows a clear verb_noun pattern. Naming consistency is perfect as there is only one name.

Tool Count3/5

One tool for a domain that covers 7 dimensions feels slightly thin; a more granular breakdown into separate tools for each dimension might improve flexibility, but the single tool is comprehensive.

Completeness5/5

The tool covers all 7 gateway-readiness dimensions comprehensively, providing a full static scan without obvious gaps. It is read-only, which is appropriate for scanning.

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources