io.github.CodingSelim/mcp-scanother

mcp-scan

Verified · yesterday

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Install

claude mcp add mcp-scan -- npx -y [email protected]

Our take

This server performs passive security scanning of MCP servers against the OWASP MCP Top 10 and reports a letter-grade result. It is best suited to developers, reviewers, or platform teams who want a quick security sanity check during evaluation or CI. The use case is concrete and relevant, though the project appears early and any grading output should be treated as a screening signal rather than a full security assessment.

reviewed by hand · 2026-07-21

Something wrong or dead here? Report it

Verification record

last verified
yesterday
github stars
0
last commit
25 days ago
archived
no
license
MIT
npm
owasp-mcp-scan
downloads / wk
92
latest version
0.2.1
in registry since
2026-07-11

github.com/CodingSelim/mcp-scan

More in other

browse all →
chrome-devtools-mcpother

Chrome DevTools MCP

Verified · 9 days ago

MCP server for Chrome DevTools

hand-reviewed49k starschecked 9 days ago

reactive-resumeother

Reactive Resume

Verified · 9 days ago

Free open-source resume builder with remote MCP tools for resumes and job applications.

hand-reviewed41k starschecked 9 days ago

mcp-server-commandsother

mcp-server-commands

Verified · 9 days ago

An MCP server to run arbitrary commands

hand-reviewed39k stars221 dl/wkchecked 9 days ago

mcpother

PostHog MCP Server

Verified · 11 days ago

Official PostHog MCP Server for product analytics, feature flags, experiments, and more.

hand-reviewed38k starschecked 11 days ago

mcpother

Keploy

Verified · 24 days ago

End-to-end API testing — generate and run tests from OpenAPI, curl, Postman, or real user traffic.

hand-reviewed18k starschecked 24 days ago

coderother

Coder

Verified · today

Manage Coder workspaces, templates, and cloud development environments

hand-reviewed14k starschecked today