mcp-scanner

Why we included this project

Most teams wiring MCP servers into agent workflows don't have a dedicated AppSec person to review them, and this scanner is built for that gap. It runs YARA pattern matching, an LLM-as-judge pass over tool descriptions, and Cisco's inspect API as separate engines you can enable or disable, so you control the cost and depth. You're not limited to live endpoints either: saved JSON can be statically analyzed in CI, bundled binaries get VirusTotal hash lookups for malware, and PyPI packages can be downloaded into a Docker sandbox for behavioral review. That range keeps it practical for a small team. It works as a CLI, a REST service, or an importable Python module.