Is Ramparts safe to use?

Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Ramparts?

Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Ramparts?

Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Ramparts actively maintained?

Ramparts is actively maintained — last commit was 18 days ago. It has 86 GitHub stars.

Ramparts

Name: Ramparts
Author: highflame-ai

by highflame-ai

mcp scan that scans any mcp server for indirect attack vectors and security or configuration vulnerabilities

86 0 tools GitHub

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 18d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ramparts": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ramparts)](https://mcppedia.org/s/ramparts)

Read me

What Ramparts does

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

39/100across 5 weighted dimensions

How we score →

0255075100

−61

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Ramparts safe to use?: Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Ramparts?: Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Ramparts?: Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Ramparts actively maintained?: Ramparts is actively maintained — last commit was 18 days ago. It has 86 GitHub stars.

Similar servers

Others in security

View all →

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

8.7k 3

io.github.peacprotocol/peac90

Signed receipts for agent, API, and MCP interactions. Portable and offline-verifiable.

11 5

Iam Policy Autopilot90

IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

361 1

MCP Security Weekly

Get CVE alerts and security updates for Ramparts and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ramparts": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ramparts)](https://mcppedia.org/s/ramparts)

Read me

What Ramparts does

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

Ramparts: mcp (model context protocol) scanner

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Overview

Ramparts is a scanner designed for the Model Context Protocol (MCP) ecosystem. As AI agents and LLMs increasingly rely on external tools and resources through MCP servers, ensuring the security of these connections has become critical.

The Model Context Protocol (MCP) is an open standard that enables AI assistants to securely connect to external data sources and tools. It allows AI agents to access databases, file systems, and APIs through toolcalling to retrieve real-time information and interact with external or internal services.

Ramparts is under active development. Read our launch blog.

The Security Challenge

MCP servers expose powerful capabilities—file systems, databases, APIs, and system commands—that can become attack vectors like tool poisoning, command injection, and data exfiltration without proper security analysis. - 📚 Security Features & Attack Vectors

What Ramparts Does

Ramparts provides security scanning of MCP servers by:

Discovering Capabilities: Scans all MCP endpoints to identify available tools, resources, and prompts
Multi-Transport Support: Supports HTTP, SSE, stdio, and subprocess transports with intelligent fallback
Session Management: Handles stateful MCP servers with automatic session ID management
Static Analysis: Performs yara-based checks for common vulnerabilities
Cross-Origin Analysis: Detects when tools span multiple domains, which could enable context hijacking or injection attacks
LLM-Powered Analysis: Uses AI models to detect sophisticated security issues
Risk Assessment: Categorizes findings by severity and provides actionable recommendations

💡 Jump directly to detailed Rampart features? 📚 Detailed Features

Who Ramparts is For

Developers: Scan MCP servers for vulnerabilities in your development environment (Cursor, Windsurf, Claude Code) or production deployments.
MCP users: Scan third-party servers before connecting, validate local servers before production.
MCP developers: Ensure your tools, resources, and prompts don't expose vulnerabilities to AI agents.

Use Cases

Security Audits: Comprehensive assessment of MCP server security posture
Development: Testing MCP servers during development and testing phases
CI/CD Integration: Automated security scanning in deployment pipelines
Compliance: Meeting security requirements for AI agent deployments

💡 Caution: Ramparts analyzes MCP server metadata and static configurations. For comprehensive security, combine with runtime MCP guardrails and adopt a layered security approach. The MCP threat landscape is rapidly evolving, and rampart is not perfect and inaccuracies are inev

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

39/100across 5 weighted dimensions

How we score →

0255075100

−61

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Ramparts safe to use?: Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Ramparts?: Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Ramparts?: Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Ramparts actively maintained?: Ramparts is actively maintained — last commit was 18 days ago. It has 86 GitHub stars.