cisco-ai-defense/mcp-scannerMCPMCP Server

mcp-scanner

Scan MCP servers for potential threats & security findings.

953stars

114forks

Python

agentsaimcpsecurity

Quality signals

ActiveNo testsNo CIThin docsNo licensePopular

Open Repository Download ZIP

AI summary

Auto-generated overview of what this skill does and when to reach for it.

CLI and API tool that scans MCP servers and tools for security threats using YARA, LLM analysis, and Cisco AI Defense inspect API.

Use this when

checking an MCP server for malware before deployment
auditing third-party MCP tools for vulnerabilities
scanning MCP resources and prompts for malicious content
verifying MCP server dependencies for known CVEs
running security checks in CI/CD pipelines

Don't use when

scanning non-MCP systems or applications
performing general network penetration testing
checking Docker images or container security

Capabilities

scans MCP tools, prompts, resources, and server instructions
uses YARA rules for pattern-based threat detection
integrates Cisco AI Defense inspect API for AI-specific threat analysis
checks Python dependencies for known vulnerabilities via pip-audit
detects malware in bundled files using VirusTotal hash lookups
supports static/offline scanning for CI/CD and air-gapped environments

InstallMCPRun via uvx (Python)

Universal installANY TOOL

$ npx skillcity@latest cisco-ai-defense/mcp-scanner

Auto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.

Requires Node.js 18+ (ships with npx).

Or install manually

uvx mcp-scanner

MCP Configuration

Add this to your claude_desktop_config.json

{
  "mcpServers": {
    "mcp-scanner": {
      "command": "uvx",
      "args": [
        "mcp-scanner"
      ]
    }
  }
}

Loading README…

Discover the toolingbehind modern intelligence

Discover the toolingbehind modern intelligence

mcp-scanner