MCP Scanner

Security scanner for MCP (Model Context Protocol) servers. Detect malicious tools, data exfiltration, and supply chain risks before connecting an MCP server to your AI agent.

PyPI Python 3.10+ License: MIT CI

Why MCP Scanner?

MCP servers give AI agents (Claude Code, Cursor, Copilot) direct access to tools, filesystems, and APIs. But nobody is checking if those servers are safe.

MCP Scanner analyzes:

  • MCP server config files (Claude Code, Cursor, generic)
  • Command-level risks (npx --yes, curl|bash, sudo)
  • Secret exposure in environment variables
  • Filesystem and network access patterns
  • Source code of MCP server implementations (with AgentGuard integration)

Quick Start

pip install dfx-mcp-scanner

# Scan your Claude Code MCP config
mcp-scanner

# Scan a specific config
mcp-scanner ~/.cursor/mcp.json

# JSON output
mcp-scanner .mcp.json --format json

What It Detects

Rule Severity Description
Remote code execution CRITICAL `curl
Auto-install packages HIGH npx --yes without version pinning
Privileged execution CRITICAL Server running as root/sudo
Secret exposure CRITICAL Real API keys/tokens in config env vars
Host filesystem access HIGH Server accessing /etc, /root, /proc
External network access MEDIUM Server connecting to non-localhost URLs
Excessive tool count LOW Server registering >20 tools

Supported Configs

  • Claude Code (~/.claude/claude_code_config.json)
  • Cursor (~/.cursor/mcp.json)
  • Project-level (.mcp.json)
  • Generic MCP server configs

AgentGuard Integration

When AgentGuard is installed, MCP Scanner performs deep source code analysis on MCP server implementations using all 10 OWASP ASI detection rules.

License

MIT - see LICENSE.

Built by Dockfix Labs.

Project links

Data verified by PyPI on
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.4.0)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for dockfixlabs from gravatar.com dockfixlabs

Credits

Author: Dockfix Labs

GitHub Statistics

Data verified by PyPI on 
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev

Tags

mcp model-context-protocol security scanner ai-agents claude cursor

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

dfx_mcp_scanner-0.3.0.tar.gz (11.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

dfx_mcp_scanner-0.3.0-py3-none-any.whl (12.7 kB view details)

Uploaded Python 3

File details

Details for the file dfx_mcp_scanner-0.3.0.tar.gz.

File metadata

  • Download URL: dfx_mcp_scanner-0.3.0.tar.gz
  • Upload date:
  • Size: 11.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dfx_mcp_scanner-0.3.0.tar.gz
Algorithm Hash digest
SHA256 6e96eb297b7a883dab6300508c9206ec4dfb0767ffd05de191d4c37ab5831600
MD5 da06b6c7811ea7519c1773af38782031
BLAKE2b-256 07683db768c8e9efd5531ffb2e73971286ebbbfd0ae1a974a3bd51b1908f7cfe

See more details on using hashes here.

Provenance

The following attestation bundles were made for dfx_mcp_scanner-0.3.0.tar.gz:

Publisher: publish.yml on dockfixlabs/mcp-scanner

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dfx_mcp_scanner-0.3.0-py3-none-any.whl.

File metadata

File hashes

Hashes for dfx_mcp_scanner-0.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 ad3d19fb067b616e654892b302d93e33197c1fcda72b9dd57debcd3b5d1f4106
MD5 6f65019e5711d2d02307c9487fe4cc3a
BLAKE2b-256 645b3dc6ced347097952cf8a265945f5a80294a9b84cede5c58b0bad40e5e7ec

See more details on using hashes here.

Provenance

The following attestation bundles were made for dfx_mcp_scanner-0.3.0-py3-none-any.whl:

Publisher: publish.yml on dockfixlabs/mcp-scanner

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page