theodornengoy/MCP Safety Scan
Scan JS/TS/Python/Go repos for common MCP/tool-server security footguns (CORS, eval, exec, etc.)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan | no | . |
| baseline | Baseline JSON file to ignore existing findings | no | "" |
| ignore-dirs | Comma-separated list of directory basenames to ignore (e.g. test,__tests__,fixtures) | no | "" |
| files-from | Newline-delimited list of files to scan (relative to path). If set, only these files are scanned. | no | "" |
| include-tests | Include test files (e.g. *.test.*, *.spec.*, *_test.go, test_*.py). Default is false. | no | false |
| format | Output format (text, json, sarif, github) | no | github |
| fail-on | Fail threshold (critical, high, medium, low, info, none) | no | high |
| sarif-output | SARIF filename (only used when format=sarif) | no | mcp-safety-scan.sarif |
Outputs
| name | description |
|---|---|
| sarif_file | Path to the SARIF file (only set when format=sarif) |