io.github.fpetitit/mcpcheckup MCP Server

This MCP server scans remote MCP servers for protocol, security, and TLS issues. It accepts an MCP server URL using Streamable HTTP or SSE transport, performs checks, and exposes scan tools via MCP. It produces a dashboard covering connectivity, tool/resource inventory, security heuristics, and network/TLS conditions.

🛠️ Key Features

Scans remote MCP servers for protocol, security, and TLS issues
Supports MCP server transport via Streamable HTTP or SSE
Dashboard includes protocol negotiation and server info
Enumerates tools, resources, and prompt/schema details
Applies security heuristics such as prompt-injection-style wording in tool descriptions
Flags tools that may expose sensitive capabilities (exec, filesystem, network)
Reports plaintext transport and missing tool descriptions (as indicated in excerpt)

🚀 Use Cases

Validate connectivity and handshake behavior of a remote MCP server
Review advertised capabilities, tool schemas, and resource inventory
Detect likely security and transport weaknesses, including plaintext transport

⚡ Developer Benefits

Full inventory of tools and schemas for inspected MCP servers
Heuristic indicators for potentially sensitive capabilities (exec/filesystem/network)
Protocol negotiation and advertised capability visibility for troubleshooting

⚠️ Limitations

Descriptions in the source excerpt are partial; the full scope of “Network & TLS” checks is not fully specified.

mcpcheck

A webcheck.xyz-style scanner for remote MCP servers.

Enter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:

Connectivity & Handshake — protocol negotiation, server info, advertised capabilities.

Tools, Resources & Prompts — full inventory with schemas.

Security Heuristics — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.

Network & TLS — certificate validity, HTTP security headers, CORS policy.

License Information — presence of a LICENSE file or license mention in server instructions.

Install

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://mcpcheckup.xyz/api/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "mcpcheckup": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcpcheckup.xyz/api/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

io.github.fpetitit/mcpcheckup