mcp-scan

io.github.CodingSelim/mcp-scan

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

View repository →Homepage →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "mcp-scan": {
      "command": "npx",
      "args": [
        "-y",
        "owasp-mcp-scan@0.2.1"
      ]
    }
  }
}

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.2.1
Registry
active
Published
7/11/2026

More Developer Tools servers

Browse all Developer Tools →

WinBridgeAgent

codyard

Open-source Windows MCP server for AI assistants. File, clipboard, screenshot, process & power mgmt.

Developer ToolsAdded 9 months ago

io.github.codymcc4/fuelcenter

codymcc4

Marathon fueling, pace, hydration, heat, carb-loading, and gel-comparison calculators.

Developer ToolsAdded 6 months ago

Riveter

riveterhq

MCP server for Riveter's enrichment, scraping, and monitoring API

Developer ToolsAdded 1 week ago

io.github.codyz123/schelling-protocol

codyz123

Universal coordination protocol for AI agents. Discovery, matching, and negotiation.

Developer ToolsAdded 8 months ago

LayerMap

coffeecoproject

Call graph for coding agents: callers up to HTTP routes, callees, usages for TS/JS, Go, Python, Java

Developer ToolsAdded 5 days ago

cogDepot

cogdepot

Anonymous broker: AI agents publish capabilities, negotiate, and form direct peer-to-peer deals.

Developer ToolsAdded 1 week ago

Add the badge to your site

Show visitors that mcp-scan is listed here — it’s also the link we check for a free listing.

mcp-scan — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-codingselim-mcp-scan?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="mcp-scan — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![mcp-scan — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-codingselim-mcp-scan?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.