Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs
io.github.vpatser1/mcp-server-security-scanner is an MCP server that scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs. Its tool list has not been published yet over stdio, requires no API key, and scores 33/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-vpatser1-mcp-server-security-scanner": {
"command": "npx",
"args": [
"-y",
"mcp-server-security-scanner"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'mcp-server-security-scanner' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked mcp-server-security-scanner against OSV.dev.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in security
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
YouTube transcripts, comments, video details, heatmaps, search, channels and playlists.
MCP server for 1Password service accounts — tools and resources for vaults and credentials
MCP Security Weekly
Get CVE alerts and security updates for io.github.vpatser1/mcp-server-security-scanner and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.