SocketlistSecurity / mcp-scan
mcp-scan
io.github.CodingSelim/mcp-scan · v0.2.1
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Install
npx -y owasp-mcp-scanTypical command from the package name. Check the README for required configuration and credentials before connecting it to real data.
Signals
| GitHub stars | 0 |
| npm weekly downloads | 40 |
| Last push | 5d ago |
| Licence | MIT |
| Open issues | 0 |
| SECURITY.md | Yes |
| Language | TypeScript |
| Latest version published | 2026-07-11 |
Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.
Similar servers compare all →
Bawbel Scanner
Score 81Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Bawbel Scanner
Score 81Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
SkillTotal
Score 80Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.