mcp-scan

io.github.CodingSelim/mcp-scan · v0.2.1 · security

mcp-scan is a local (stdio) package with no hosted endpoint. It scores 18/100.

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

Repository · Website · JSON · Add to my inventory

Score 18/100

health	0 / 25
authEase	9 / 15
toolQuality	0 / 15
maintenance	3 / 15
adoption	0 / 10
usage	0 / 10
security	6 / 10

Scoring v0.3, computed 2026-10-14T12:57:30.893Z.

Local (stdio) package only: no hosted endpoint to check
GitHub signals are off for everyone: maintenance uses registry dates (half credit)

Health history

No checks yet.

Tools (0)

Tools are listed after a successful handshake.