robdtaylor/mcpsec - MCP Security Scanner
Scan MCP server configurations for security vulnerabilities: tool poisoning, credential exposure, SSRF, prompt injection, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config-path | Path to MCP configuration file to scan | yes | — |
| fail-on | Minimum severity to fail the workflow: critical, high, medium, or none | no | high |
Outputs
| name | description |
|---|---|
| score | Security score (0-100) |
| status | Scan status: pass, warn, or fail |
| findings | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |