# Mcp Config Guard

> Zero-dependency MCP security linter — 54 OWASP-mapped checks, 56 malicious packages, 28 CVEs. pip install mcp-config-guard

- **Type:** MCP server
- **Install:** `agentstack add mcp-kgt24k-mcp-config-guard`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [KGT24k](https://agentstack.voostack.com/s/kgt24k)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [KGT24k](https://github.com/KGT24k)
- **Source:** https://github.com/KGT24k/mcp-config-guard
- **Website:** https://pypi.org/project/mcp-config-guard/

## Install

```sh
agentstack add mcp-kgt24k-mcp-config-guard
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# MCP Config Guard

**Zero-dependency security linter for MCP configurations.**

Scans your `.mcp.json` for 54 types of security vulnerabilities before any MCP server starts. No API keys. No cloud. No LLM required.

[](https://pypi.org/project/mcp-config-guard/)
[](https://www.python.org/downloads/)
[](https://opensource.org/licenses/MIT)
[](https://pypi.org/project/mcp-config-guard/)

## Why?

**43% of public MCP servers have command injection flaws** (BlueRock TechReport 2026). Every MCP config you use is a trust boundary — and most developers never audit them.

Config Guard catches what humans miss:

- Typosquatted packages that look like real ones
- Servers with known CVEs (28 CVEs across 20 packages)
- 56 confirmed malicious packages (JFrog, Kaspersky, Lazarus APT, SANDWORM_MODE)
- Secret leakage in environment variables
- Rug-pull vectors (`npx @latest` auto-updates)
- Shadow servers exposing via tunnels

## Install

```bash
pip install mcp-config-guard
```

> **Note:** The package was renamed to `mcp-config-guard` on PyPI. Both `config-guard` and `mcp-config-guard` CLI commands work after installation.

## Quick Start

```bash
# Scan your current directory's .mcp.json
mcp-config-guard

# Scan a specific project
mcp-config-guard --path /my/project

# Auto-discover all MCP configs on your system
mcp-config-guard --discover

# CI/CD integration (SARIF output for GitHub Code Scanning)
mcp-config-guard --sarif > results.sarif

# JSON output for scripting
mcp-config-guard --json
```

## 54 Security Checks

Every check is mapped to the [OWASP MCP Top 10](https://owasp.org/www-project-mcp-top-10/) and [OWASP Agentic Security Top 10](https://owasp.org/www-project-agentic-security/). See [docs/OWASP-MAPPING.md](docs/OWASP-MAPPING.md) for full CWE mappings.

| # | Check | Risk | OWASP |
|---|-------|------|-------|
| 1 | Network exposure (non-localhost URLs) | HIGH | MCP-03 |
| 2 | Rug pulls (`npx @latest` auto-update) | HIGH | MCP-07 |
| 3 | Secret leakage (API keys in args/env) | HIGH | MCP-04 |
| 4 | Command injection (`shell=True`) | CRITICAL | MCP-01 |
| 5 | Path traversal (`..` in arguments) | MEDIUM | MCP-05 |
| 6 | Typosquat detection (Levenshtein distance) | HIGH | MCP-07 |
| 7 | Dangerous permissions (`--no-sandbox`, `sudo`) | HIGH | MCP-06 |
| 8 | Missing authentication on HTTP transport | MEDIUM | MCP-08 |
| 9 | Sensitive path access (`.ssh`, `.aws`, `.env`) | HIGH | MCP-04 |
| 10 | Overbroad filesystem access (`/`, `C:\`) | MEDIUM | MCP-06 |
| 11 | Environment variable leaks (hardcoded secrets) | MEDIUM | MCP-04 |
| 12 | Excessive server count (attack surface) | LOW | MCP-10 |
| 13 | Known CVEs (28 CVEs across 20 packages) | CRITICAL | MCP-09 |
| 14 | Symlink bypass (CVE-2025-53109) | HIGH | MCP-05 |
| 15 | Shadow servers (ngrok, cloudflared, `0.0.0.0`) | HIGH | MCP-05 |
| 16 | Code execution (`eval`/`exec` patterns) | CRITICAL | MCP-01 |
| 17 | Known malicious packages (56 confirmed malware) | CRITICAL | MCP-07 |
| 18 | Deprecated SSE transport (no per-request auth) | MEDIUM | MCP-03 |
| 19 | Shell servers (raw shell as MCP server) | CRITICAL | MCP-01 |
| 20 | Unpinned packages (npx/uvx without version) | MEDIUM | MCP-04 |

## CVE Database

Config Guard tracks known vulnerable MCP packages:

| Package | CVE | Severity |
|---------|-----|----------|
| `mcp-remote` | CVE-2025-6514 | Critical (CVSS 9.6) |
| `@modelcontextprotocol/server-git` | CVE-2025-68145 | Critical |
| `mcp-server-git` | CVE-2026-27735 | Medium |
| `@anthropic/mcp-server-filesystem` | CVE-2025-53109 | High |
| `gemini-mcp-tool` | CVE-2026-0755 | Critical |
| `mcp-vegalite-server` | CVE-2026-1977 | Critical |
| `github-kanban-mcp` | CVE-2026-0756 | High |
| `godot-mcp` | CVE-2026-25546 | High |
| `fermat-mcp` | CVE-2026-2008 | Critical |
| `@anthropic/mcp-inspector` | CVE-2026-23744 | Critical (CVSS 9.8) |

Config Guard also detects **confirmed malicious packages** (e.g., `postmark-mcp`, `@lanyer640/mcp-runcommand-server`) that contain reverse shells or malware payloads.

## Output Formats

### Human-readable (default)
```
MCP Security Scan Results

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [KGT24k](https://github.com/KGT24k)
- **Source:** [KGT24k/mcp-config-guard](https://github.com/KGT24k/mcp-config-guard)
- **License:** MIT
- **Homepage:** https://pypi.org/project/mcp-config-guard/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-kgt24k-mcp-config-guard
- Seller: https://agentstack.voostack.com/s/kgt24k
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.