# Mcp Doctor > Scan, Score, Install MCP Servers with confidence. The missing toolkit for the MCP ecosystem. - **Type:** MCP server - **Install:** `agentstack add mcp-xlyoung-mcp-doctor` - **Verified:** Pending review - **Seller:** [xlyoung](https://agentstack.voostack.com/s/xlyoung) - **Installs:** 0 - **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [xlyoung](https://github.com/xlyoung) - **Source:** https://github.com/xlyoung/mcp-doctor ## Install ```sh agentstack add mcp-xlyoung-mcp-doctor ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # ๐Ÿฉบ MCP Doctor **Scan ยท Score ยท Install โ€” Your MCP Server Toolkit** [](https://github.com/xlyoung/mcp-doctor) [](https://github.com/xlyoung/mcp-doctor/actions/workflows/ci.yml) [](https://pypi.org/project/mcpdoctor-cli/) [](https://pypi.org/project/mcpdoctor-cli/) [](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://github.com/xlyoung/mcp-doctor#-security-checks) [](https://modelcontextprotocol.io/) > The missing security and quality toolkit for the [Model Context Protocol](https://modelcontextprotocol.io/) ecosystem. > Scan MCP servers for vulnerabilities, score their quality, compare alternatives, and install with confidence. ### By the Numbers | ๐Ÿ“ฆ Registry | ๐Ÿ”’ Security Checks | ๐Ÿ“Š Quality Dimensions | |:-----------:|:-------------------:|:--------------------:| | **100+** servers scored | **10** detection engines | **5** scoring categories | --- ## ๐Ÿค” Why MCP Doctor? The MCP ecosystem is exploding โ€” hundreds of servers, but no way to know which ones are safe, well-maintained, or even work. MCP Doctor is your one-stop CLI to navigate the MCP jungle. **Before installing an MCP server, run it through the Doctor.** ### The MCP Security Crisis In the first 6 months of 2026, security researchers filed **30+ CVEs** targeting MCP servers, clients, and infrastructure: - **CVE-2026-44717** โ€” `eval()` RCE in mcp_calculate_server (CVSS 9.8) - **CVE-2026-49257** โ€” Default no-auth + 0.0.0.0 binding in mcp-pinot (CVSS 10.0) - **CVE-2026-46519** โ€” Access control bypass in mcp-server-kubernetes (presentation-layer only filtering) - **CVE-2026-32814** โ€” MCP SDK authentication bypass, 3 Indian AI startups compromised - **CVE-2026-25536** โ€” Concurrent session data leakage in mcp-handler (Vercel) A study of 39,884 open-source MCP servers found **106 zero-day vulnerabilities**. OX Security found that **82% of MCP implementations** have path traversal vulnerabilities. **MCP Doctor catches these before you deploy them.** ### MCP Doctor vs Other Tools | Feature | MCP Doctor | Cisco mcp-scanner | Snyk Agent Scan | Oxvault | mcp-shield | mcpsec | |---------|:----------:|:-----------------:|:---------------:|:-------:|:----------:|:------:| | Security scanning | โœ… 10 engines | โœ… YARA+LLM+API | โœ… LLM+guardrails | โœ… SAST+runtime | โœ… 20 rules | โœ… fuzzer | | Quality scoring (0-100) | โœ… | โŒ | โŒ | โŒ | โœ… (A-F) | โŒ | | Curated registry (100+) | โœ… | โŒ | โŒ | โŒ | โŒ | โŒ | | Server comparison | โœ… | โŒ | โŒ | โŒ | โŒ | โŒ | | One-command install | โœ… | โŒ | โŒ | โŒ | โŒ | โŒ | | CI/CD integration | โœ… | โœ… | โœ… | โœ… (SARIF) | โŒ | โŒ | | Runtime proxy mode | โŒ | โŒ | โœ… | โŒ | โŒ | โŒ | | REST API server | โŒ | โœ… | โŒ | โŒ | โŒ | โŒ | | Local / no API dependency | โœ… | โœ… | โŒ (needs token) | โœ… | โœ… | โœ… | | SARIF output | โŒ | โŒ | โŒ | โœ… | โŒ | โŒ | > **How MCP Doctor fits:** Cisco mcp-scanner and Snyk Agent Scan are excellent for auditing existing deployments. Oxvault is best for deep SAST of MCP source code. **MCP Doctor is for the pre-install workflow** โ€” discover, compare, and install servers with confidence. Most teams need both: a scanner for what's deployed and a discovery tool for what to deploy next. ## โœจ Features - ๐Ÿ”’ **Security Scan** โ€” 8 detection engines: prompt injection, path traversal, credential leakage, network exfiltration, command injection, SSRF, supply chain, and excessive permissions - ๐Ÿ“Š **Quality Score** โ€” Automated 0-100 scoring based on: security, maintenance, documentation, testing, community - โš–๏ธ **Compare** โ€” Side-by-side comparison of two MCP servers across all quality dimensions - ๐Ÿ“ฆ **Registry** โ€” Curated database of 100+ popular MCP servers with pre-computed scores and categories - โšก **Quick Install** โ€” `mcp-doctor install ` โ€” one command to scan + score + install - ๐Ÿฉบ **CI/CD Audit** โ€” `mcp-doctor audit ` โ€” full report with exit codes for pipelines - ๐Ÿ“ˆ **Stats** โ€” Registry overview with category breakdowns and averages ## ๐Ÿš€ Quick Start ```bash # Install pip install mcpdoctor-cli # Or install directly from GitHub (if PyPI not yet available) pip install git+https://github.com/xlyoung/mcp-doctor # Scan an MCP server for security issues mcp-doctor scan @modelcontextprotocol/server-filesystem # Score a server's quality (0-100) mcp-doctor score modelcontextprotocol/servers # Compare two servers side-by-side mcp-doctor compare @modelcontextprotocol/server-postgres mcp-server-mysql # See top-rated servers by category mcp-doctor list --category database --sort score # Install with confidence (blocks on critical security issues) mcp-doctor install @modelcontextprotocol/server-github # Full audit for CI/CD (exits non-zero on failure) mcp-doctor audit @modelcontextprotocol/server-filesystem --threshold 60 mcp-doctor audit @modelcontextprotocol/server-filesystem --json # machine-readable # View registry stats mcp-doctor stats ``` ## ๐Ÿ”ฌ Demo: Scan in Action ``` $ mcp-doctor scan @modelcontextprotocol/server-filesystem ๐Ÿฉบ MCP Doctor โ€” Security Scan โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ” Target: @modelcontextprotocol/server-filesystem ๐Ÿ”’ Security Issues Found: 3 โ”œโ”€โ”€ ๐ŸŸ  MEDIUM Unconstrained Parameters โ”‚ โ””โ”€โ”€ 6 string params lack maxLength/pattern constraints โ”‚ โ†’ path (read_file, write_file, edit_file, ...) โ”œโ”€โ”€ ๐ŸŸก LOW Excessive Permissions โ”‚ โ””โ”€โ”€ Configurable access control but no default restrictions โ””โ”€โ”€ ๐ŸŸก LOW No Input Sanitization โ””โ”€โ”€ Path parameters accept ../ traversal sequences โš ๏ธ Security Score: 72/100 (Fair) Use --json for machine-readable output Use --threshold 80 to enforce minimum score in CI/CD ``` ## ๐Ÿ“Š Quality Score Breakdown Each MCP server receives a score from 0-100: | Category | Weight | What it checks | |----------|--------|----------------| | Security | 35% | Prompt injection, path traversal, network safety | | Maintenance | 25% | Commit frequency, issue response time, release cadence | | Documentation | 15% | README quality, API docs, examples | | Testing | 15% | Test coverage, CI status, integration tests | | Community | 10% | Stars, contributors, ecosystem integrations | ## ๐Ÿ”’ Security Checks MCP Doctor scans for common MCP vulnerability patterns: - **Prompt Injection** โ€” User input flowing directly into LLM prompts without sanitization - **Path Traversal** โ€” File system tools accepting `../` in paths without validation - **Credential Leakage** โ€” API keys, tokens, or secrets exposed in logs or responses - **Network Exfiltration** โ€” Suspicious external endpoints (webhook.site, ngrok tunnels) - **Supply Chain** โ€” Typosquatting, abandoned dependencies, known CVEs - **SSRF** โ€” Server-side request forgery via unvalidated URL parameters - **Command Injection** โ€” Shell command execution with unsanitized input - **Excessive Permissions** โ€” Auth bypass flags, unrestricted filesystem globs, world-readable permissions - **Unconstrained Parameters** โ€” String params without maxLength/pattern/enum (DoS + injection chain risk) - **Tool Access Control Bypass** โ€” Presentation-layer filtering without execution-layer enforcement (CVE-2026-46519 pattern) ## โš–๏ธ Compare Servers Can't decide between two MCP servers? Compare them: ```bash $ mcp-doctor compare @modelcontextprotocol/server-postgres mcp-server-mysql MCP Server Comparison โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”ณโ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”ณโ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”“ โ”ƒ Metric โ”ƒ postgres โ”ƒ mysql โ”ƒ โ”กโ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ•‡โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ•‡โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”ฉ โ”‚ Overall Score โ”‚ 90/100 โ”‚ 78/100 โ”‚ โ”‚ Security โ”‚ 90 โ”‚ 80 โ”‚ โ”‚ Maintenance โ”‚ 95 โ”‚ 60 โ”‚ โ”‚ Documentation โ”‚ 70 โ”‚ 50 โ”‚ โ”‚ Testing โ”‚ 55 โ”‚ 50 โ”‚ โ”‚ Community โ”‚ 95 โ”‚ 80 โ”‚ โ”‚ Security Issues โ”‚ 0 โ”‚ 0 โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โœ” Recommendation: @modelcontextprotocol/server-postgres (score 90 vs 78) ``` ## ๐Ÿ“– MCP Server Registry Browse the full registry: **[REGISTRY.md](./REGISTRY.md)** Categories: - ๐Ÿ—„๏ธ Database โ€” PostgreSQL, MySQL, SQLite, Redis, MongoDB, Qdrant, ClickHouse, Supabase, Neon, Google Toolbox - ๐Ÿ“ File System โ€” Local files, S3 - ๐ŸŒ Web โ€” Brave Search, Playwright, Puppeteer, Firecrawl, Chrome MCP, BrowserMCP, bb-browser - ๐Ÿ”ง DevOps โ€” GitHub (official & MCP), GitLab, Docker, Kubernetes, Git, XcodeBuild - ๐Ÿ’ฌ Communication โ€” Slack, Discord, Gmail, Telegram, WhatsApp - ๐Ÿง  Knowledge โ€” Notion, Obsidian, Memory, Confluence - ๐Ÿค– AI/ML โ€” FastMCP, Hugging Face, Replicate, Ollama - ๐Ÿ”’ Security โ€” Semgrep, NVD CVE, GhidraMCP, MCP Audit, MCPSec, HexStrike AI - ๐ŸŽจ Design โ€” Figma Context MCP - ๐Ÿ“‹ Productivity โ€” Google Maps, Linear, Airtable, Google Calendar, Todoist, Kreuzberg - ๐Ÿ–ฅ๏ธ System โ€” DesktopCommanderMCP, Windows-MCP - ๐Ÿ› ๏ธ Developer Tools โ€” MCP Inspector, git-mcp, MCP Registry - โ˜๏ธ Cloud โ€” AWS (awslabs), ActivePieces - ๐Ÿ—๏ธ Framework โ€” mcp-use - ๐Ÿ”„ Automation โ€” ActivePieces ## ๐Ÿ› ๏ธ Development ```bash git clone https://github.com/xlyoung/mcp-doctor.git cd mcp-doctor pip install -e ".[dev]" pytest ``` ## ๐Ÿค Contributing Found an MCP server that should be in the registry? Open an [issue](https://github.com/xlyoung/mcp-doctor/issues/new) or submit a PR! See [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines. ## ๐Ÿ” Security Found a security vulnerability? See [SECURITY.md](./SECURITY.md) for responsible disclosure guidelines. ## ๐Ÿ“œ Changelog See [CHANGELOG.md](./CHANGELOG.md) for release history. ## ๐Ÿ“„ License MIT โ€” do whatever you want with it. --- *Built for the MCP community. Star โญ if you find it useful!* ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source โ€” we do not rehost the code. - **Author:** [xlyoung](https://github.com/xlyoung) - **Source:** [xlyoung/mcp-doctor](https://github.com/xlyoung/mcp-doctor) - **License:** MIT Install and usage instructions live in the source repository linked above. ## Pricing - **Free** โ€” Free ## Security capabilities Automated source analysis of v0.1.0 โ€” what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** yes *"Yes" means the capability is present in the source โ€” more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** โ€” security scan: flagged โ€” Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-xlyoung-mcp-doctor - Seller: https://agentstack.voostack.com/s/xlyoung - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack โ€” the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.