The io.github.vpatser1/mcp-server-security-scanner MCP server scans MCP configurations to identify security issues. It checks for 30+ CVEs, detects prompt injection and tool poisoning risks, and validates OAuth configurations. The scanner is focused on configuration-based security validation for MCP setups.
🛠️ Key Features
- Scans MCP configs for 30+ CVEs
- Detects prompt injection
- Detects tool poisoning
- Validates OAuth configs
🚀 Use Cases
- Auditing MCP server configurations for known vulnerabilities (CVE coverage over 30)
- Reviewing MCP deployments for injection-related risks
- Verifying that OAuth-related MCP configuration is correctly set
⚡ Developer Benefits
- Provides configuration security scanning for MCP setups
- Helps catch issues related to CVEs, prompt injection, tool poisoning, and OAuth validation
⚠️ Limitations
- Limited to scanning and validating MCP configuration inputs (as described)