Is Ramparts safe to use?

Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Ramparts?

Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Ramparts?

Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Ramparts actively maintained?

Ramparts is actively maintained — last commit was 5 days ago. It has 92 GitHub stars.

Ramparts

Name: Ramparts
Author: highflame-ai

by highflame-ai

mcp scan that scans any mcp server for indirect attack vectors and security or configuration vulnerabilities

92 GitHub

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 5d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ramparts": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ramparts)](https://mcppedia.org/s/ramparts)

Read me

What Ramparts does

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

41/100across 5 weighted dimensions

How we score →

0255075100

−59

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Ramparts safe to use?: Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Ramparts?: Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Ramparts?: Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Ramparts actively maintained?: Ramparts is actively maintained — last commit was 5 days ago. It has 92 GitHub stars.

Similar servers

Others in security

View all →

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.8k 3

Mcp Windbg91

Model Context Protocol for WinDBG

1.4k 7

Repo Forensics90

Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 18 scanners. Zero dependencies.

112 1

MCP Security Weekly

Get CVE alerts and security updates for Ramparts and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ramparts": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ramparts)](https://mcppedia.org/s/ramparts)

Read me

What Ramparts does

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Test This Server

This server supports HTTP transport. Be the first to test it — help the community know if it works.

README

Ramparts: security scanner for MCP servers and AI agent skills

A fast, lightweight security scanner for the agent stack — Model Context Protocol (MCP) servers AND AI agent skills (Claude Code commands, agentskills.io bundles, Cursor / Codex / Windsurf / Gemini equivalents) — with built-in vulnerability detection.

Overview

Ramparts scans the two surfaces an AI agent trusts most: the MCP servers it talks to over the network, and the skill files it loads from disk and executes by name. Both deliver untrusted instructions and tool grants into the agent's loop; ramparts applies the same security pipeline (YARA, LLM analysis, OWASP MCP Top 10 tagging) to both.

MCP scanning covers the Model Context Protocol — the open standard that lets AI assistants connect to databases, file systems, and APIs via tool-calling. Ramparts discovers a server's tools/resources/prompts and audits them for prompt injection, tool poisoning, secret leakage, path traversal, command injection, cross-origin escalation, supply-chain CVEs (via OSV.dev), and more.
Skill scanning covers the markdown/YAML files an agent loads as named capabilities — Claude Code custom slash commands, Cursor / Codex / Windsurf / Gemini equivalents, and first-class support for agentskills.io bundles (<name>/SKILL.md directories with sibling scripts/, references/, assets/). Each skill body becomes a synthetic MCP prompt that runs through the same analyzers; bundled scripts get scanned through YARA, name-vs-directory mismatches surface as HIGH-severity deception findings, and the agentskills.io name/charset rules are validated.

Ramparts is under active development. Read our launch blog.

The Security Challenge

The MCP-and-skills attack surface is broad. MCP servers expose file systems, databases, APIs, and system commands — turning into attack vectors via tool poisoning, command injection, and data exfiltration without proper analysis. Agent skills carry the same risk profile (untrusted instructions an agent may follow) plus their own twists: skill-file allowed-tools grants that hand out unrestricted Bash, sensitive @<path> references that inline credentials into prompt context, name collisions that let one skill shadow another in the agent's router, and bundled scripts that ship arbitrary executable code. 📚 Security Features & Attack Vectors documents every detector ramparts ships with — across both MCP and skill scanning.

What Ramparts Does

Ramparts provides security scanning of the MCP-and-skill ecosystem by:

MCP server discovery & analysis — scans MCP endpoints for tools/resources/prompts; multi-transport (HTTP, SSE, stdio, subprocess) with intelligent fallback and session management
Skill scanning — same threat model applied to agent skill files on disk (Claude

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

41/100across 5 weighted dimensions

How we score →

0255075100

−59

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Ramparts safe to use?: Ramparts has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Ramparts?: Ramparts can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Ramparts?: Ramparts is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Ramparts actively maintained?: Ramparts is actively maintained — last commit was 5 days ago. It has 92 GitHub stars.