io.github.GuardBee/owasp-scan

Official

by GuardBee · TypeScript

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

io.github.GuardBee/owasp-scan (MCP Server)

This MCP server performs a unified OWASP Top 10 scan. It supports scanning a specified path or analyzing live tools and/or lists. The output includes an A–F grade and produces results in SARIF format, suitable for further tooling and automated workflows.

🛠️ Key Features

Unified OWASP Top 10 scanning
Input options: path or live tools/list
A–F grade output
SARIF output format

🚀 Use Cases

Run OWASP Top 10 assessments against a local or provided path
Score and report OWASP Top 10 findings from live tools or lists
Generate SARIF for ingestion by security reporting pipelines

⚡ Developer Benefits

Deterministic scoring via A–F grades
Standardized SARIF output for downstream processing

Topics

ai-securitykvkkmcpmcp-securitymodel-context-protocolowaspsecurity-scanner

packages/owasp-scan/README.md1 KBView on GitHub

@guardbee/mcp-owasp-scan

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文

One CLI/MCP for a unified OWASP MCP Top 10 gut-check — GuardBee’s answer to one-shot scanners that only connect live.

Mode	What it does
`scan <path>`	Orchestrates secret, server, oauth, audit-gap, context-oversharing, toxic-flow, tool-poisoning
`live`	Connects (stdio/HTTP), `tools/list`, then toxic-flow + tool-poisoning
`catalog`	Same as live, from a JSON dump

Optional --discover-shadow adds MCP09 host discovery via mcp-config-auditor.

Telemetry defaults on (tool name + short params; scanned code never sent). Disable with GUARDBEE_TELEMETRY=0.

Quick start

bash

npx @guardbee/mcp-owasp-scan scan ./src --format=sarif --fail-on=high
npx @guardbee/mcp-owasp-scan live --url=https://mcp.example.com/mcp
npx @guardbee/mcp-owasp-scan catalog ./tools.json --format=json

json

{
  "mcpServers": {
    "guardbee-owasp-scan": {
      "command": "npx",
      "args": ["-y", "@guardbee/mcp-owasp-scan"]
    }
  }
}

Coverage notes

MCP04 (supply chain) and MCP06 (RAG prompt injection) stay in their dedicated packages (dependency-auditor / slopsquat-scanner, prompt-injection-scanner) — they need network or content corpora this meta-scan does not pull in by default.
Grade A–F follows toxic-flow semantics (lethal trifecta → F).

Install

Add to VS Code Add to Cursor

claude_desktop_config.json