Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
MCPScan
Offensive MCP server auditor: detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
23stars
7forks
TypeScript
ai-securityllm-securitymcpmcp-securitymcpscanmodel-context-protocoloffensive-securityopen-sourcesecuritysupply-chaintool-poisoningvulnerability-scanner
Quality signals
StaleNo testsNo CIThin docsNo licenseNew
InstallMCPRun via npx (Node)
Universal installANY TOOL
$ npx skillcity@latest sahiloj/MCPScanAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
npx -y mcpscan
MCP Configuration
Add this to your claude_desktop_config.json
{
"mcpServers": {
"mcpscan": {
"command": "npx",
"args": [
"-y",
"mcpscan"
]
}
}
}Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
mcpscan — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt