MCP 安全扫描工具

What is MCP Security Scan?

MCP Security Scan is a security scanner designed for detecting and validating the security of Model Context Protocol (MCP) configuration files, including servers, prompts, resources, and tools.

How to use MCP Security Scan?

To use MCP Security Scan, install it using Cargo and run the command with the path to your configuration file. You can also specify advanced options for storage paths and API URLs.

Key features of MCP Security Scan?

• Scans server configurations in MCP files
• Automatically validates the security of entities in servers
• Supports review mode for translating descriptions into Chinese
• Compatible with various MCP server types (SSE/Stdio)
• Real-time display of scan progress and results
• Whitelist management functionality
• Records scan history and detects configuration changes

Use cases of MCP Security Scan?

1. Ensuring the security of MCP server configurations
2. Validating prompts and resources for vulnerabilities
3. Monitoring changes in configuration over time

FAQ from MCP Security Scan?

• What programming language is MCP Security Scan written in?

MCP Security Scan is developed in Rust.

• How do I install MCP Security Scan?

You can install it using the command: cargo install --path .

• Can I contribute to the project?

Yes! Contributions are welcome through Pull Requests.