Scan installed MCP servers for security vulnerabilities with 16 detection engines.
MCPpedia last refreshed this data
io.github.diemoeve/mcpampel is an MCP server that scan installed MCP servers for security vulnerabilities with 16 detection engines. Its tool list has not been published yet over stdio and http, requires no API key, and scores 77/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"mcpampel": {
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
},
"args": [
"mcpampel"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Scan installed MCP servers for security vulnerabilities with 16 detection engines.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'mcpampel' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked mcpampel against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in other
Private-by-default, local-first memory/context/task orchestrator for MCP apps and agents.
Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
SQL for Android APK and DEX files: classes, methods, strings, references and smali.
System 1 decision models (Jev, Laya, Cua-S1) as brain for agents: Browser use, computer use, games and robotics
MCP Security Weekly
Get CVE alerts and security updates for io.github.diemoeve/mcpampel and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Scan your installed MCP servers for security vulnerabilities, directly from your AI agent.
MCPAmpel discovers MCP servers from your Claude Code, Cursor, Windsurf, or Gemini CLI configuration, submits them to 16 scanning engines, and returns an aggregated trust score with detailed findings.
50 API calls/day included.
uvx mcpampel
Add to ~/.claude/settings.json or claude_desktop_config.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Add to ~/.gemini/settings.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Register for free at mcpampel.com.
| Variable | Required | Default | Description |
|---|---|---|---|
MCPAMPEL_API_KEY | Yes | - | Your API key (free at mcpampel.com) |
MCPAMPEL_BASE_URL | No | https://mcpampel.com | API base URL |
scan_my_serversDiscovers all MCP servers from your editor config and scans them with 16 engines. Returns a summary table with trust scores. No input needed.
scan_urlScan a single GitHub, GitLab, npm, or PyPI URL. Returns trust score, engine breakdown, and findings.
| Parameter | Type | Required |
|---|---|---|
url | string | Yes |
check_statusShow your daily quota usage and remaining scans.
get_scan_resultsGet detailed results for a specific scan by ID. Use after scan_my_servers or scan_url to drill into findings.
| Parameter | Type | Required |
|---|---|---|
scan_id | string | Yes |
cd mcp-plugin
uv sync
uv run pytest
Apache License 2.0