MCPScanner

MCPScanner (formerly known as mcpry) is a command-line tool for analyzing MCP servers. It does the following:

1. Discovers MCP Servers: It automatically searches for MCP server configuration files in well-known locations on the host system.
2. Analyzes Tools and Resources: It connects to each discovered server to fetch the list of available tools and resources.
3. Security Scanning with Pangea AI Guard: It uses the Pangea AI Guard service to scan the tools for malicious entities and prompts.
4. Generates Reports: It creates a JSON report (default mcpscanner.json) containing the analysis results.
5. Detects Changes: It can compare the current state of a server's tools with a previous report and display a diff if any changes are detected.
6. Finds Similar Tools: It can identify tools with similar functionality.

Installation

pip install -U mcpscanner

Configuration

Before using MCPScanner, you need to set the PANGEA_AI_GUARD_TOKEN environment variable to a Pangea API token that has access to the Pangea AI Guard service.

export PANGEA_AI_GUARD_TOKEN="pts_your_token_here"

Pangea domain

To use a Pangea domain other than the default aws.us.pangea.cloud, set the PANGEA_DOMAIN environment variable.

export PANGEA_DOMAIN="aws.us-west-2.pangea.cloud"

Usage

The primary command is scan, which runs the analysis.

mcpscanner scan

Options