# Mcp Scanner

> Security scanner for MCP (Model Context Protocol) servers - detects malicious tools, data exfiltration, and supply chain risks before connecting to your AI agent.

- **Type:** MCP server
- **Install:** `agentstack add mcp-dockfixlabs-mcp-scanner`
- **Verified:** Pending review
- **Seller:** [dockfixlabs](https://agentstack.voostack.com/s/dockfixlabs)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [dockfixlabs](https://github.com/dockfixlabs)
- **Source:** https://github.com/dockfixlabs/mcp-scanner
- **Website:** https://pypi.org/project/dfx-mcp-scanner/

## Install

```sh
agentstack add mcp-dockfixlabs-mcp-scanner
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# MCP Scanner

> **Security scanner for MCP (Model Context Protocol) servers.** Detect malicious tools, data exfiltration, and supply chain risks before connecting an MCP server to your AI agent.

[](https://pypi.org/project/dfx-mcp-scanner/)
[](https://python.org)
[](LICENSE)
[](https://github.com/dockfixlabs/mcp-scanner/actions)

---

## Why MCP Scanner?

MCP servers give AI agents (Claude Code, Cursor, Copilot) direct access to tools, filesystems, and APIs. **But nobody is checking if those servers are safe.**

MCP Scanner analyzes:
- MCP server config files (Claude Code, Cursor, generic)
- Command-level risks (`npx --yes`, `curl|bash`, `sudo`)
- Secret exposure in environment variables
- Filesystem and network access patterns
- Source code of MCP server implementations (with AgentGuard integration)

## Quick Start

```bash
pip install dfx-mcp-scanner

# Scan your Claude Code MCP config
mcp-scanner

# Scan a specific config
mcp-scanner ~/.cursor/mcp.json

# JSON output
mcp-scanner .mcp.json --format json
```

## What It Detects

| Rule | Severity | Description |
|------|----------|-------------|
| Remote code execution | CRITICAL | `curl | bash` patterns in server startup |
| Auto-install packages | HIGH | `npx --yes` without version pinning |
| Privileged execution | CRITICAL | Server running as root/sudo |
| Secret exposure | CRITICAL | Real API keys/tokens in config env vars |
| Host filesystem access | HIGH | Server accessing `/etc`, `/root`, `/proc` |
| External network access | MEDIUM | Server connecting to non-localhost URLs |
| Excessive tool count | LOW | Server registering >20 tools |

## Supported Configs

- Claude Code (`~/.claude/claude_code_config.json`)
- Cursor (`~/.cursor/mcp.json`)
- Project-level (`.mcp.json`)
- Generic MCP server configs

## AgentGuard Integration

When [AgentGuard](https://github.com/dockfixlabs/agentguard) is installed, MCP Scanner performs deep source code analysis on MCP server implementations using all 10 OWASP ASI detection rules.

## License

MIT - see [LICENSE](LICENSE).

---

Built by [Dockfix Labs](https://github.com/dockfixlabs).

---

## AgentGuard Ecosystem

**[AgentGuard](https://github.com/dockfixlabs/agentguard)** is the core security scanner. Companion tools:

| Tool | Purpose | Install |
|------|---------|---------|
| [agentguard](https://github.com/dockfixlabs/agentguard) | AI agent code security scanner | `pip install dfx-agentguard` |
| [mcp-scanner](https://github.com/dockfixlabs/mcp-scanner) | MCP server security audit | `pip install dfx-mcp-scanner` |
| [agentguard-app](https://github.com/dockfixlabs/agentguard-app) | GitHub App for PR reviews | Install from Marketplace |
| [agentguard-vscode](https://github.com/dockfixlabs/agentguard-vscode) | VS Code inline diagnostics | Install from VS Code |
| [agentguard-benchmark](https://github.com/dockfixlabs/agentguard-benchmark) | Detection benchmark suite | `git clone` |
| [agentguard-demo](https://github.com/dockfixlabs/agentguard-demo) | Live demo with Code Scanning | `git clone` |

**19 detection rules | 102 tests | 50 benchmark samples | OWASP ASI Top 10**
**GitHub Action:** [dockfixlabs/agentguard@v1](https://github.com/marketplace/actions/agentguard)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [dockfixlabs](https://github.com/dockfixlabs)
- **Source:** [dockfixlabs/mcp-scanner](https://github.com/dockfixlabs/mcp-scanner)
- **License:** MIT
- **Homepage:** https://pypi.org/project/dfx-mcp-scanner/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-dockfixlabs-mcp-scanner
- Seller: https://agentstack.voostack.com/s/dockfixlabs
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.