apeironics/MCP Security Scanner
Scan MCP servers for security vulnerabilities
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 5, 2026
- License
- MIT
Pinned Snippet
uses: apeironics/mcp-safeguard@21f53f42a62989cf7bed3f22d9265d14b7df1248 # v0.1.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| fail-on-severity | Fail on severity level (high, medium, low) | no | high |
| upload-sarif | Upload SARIF to GitHub Security | no | true |
| config-path | Path to config file | no | .mcp-safeguardrc.js |
| working-directory | Directory to scan (relative to the repository root) | no | . |
| github-token | GitHub token for API access (required for PR comments) | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| risk-score | Overall risk score (0-100) |
| total-findings | Total number of findings |
| error-count | Number of error-level findings |
| sarif-path | Path to generated SARIF file |