MCP Watch 🔍
A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.
Overview
What is MCP Watch?
MCP Watch is a comprehensive security scanner designed to detect vulnerabilities and security issues in Model Context Protocol (MCP) servers, ensuring the integrity and safety of MCP implementations.
How to use MCP Watch?
To use MCP Watch, install it via npm and run it from the command line to scan your MCP server repositories for vulnerabilities.
Key features of MCP Watch?
- Credential Detection: Identifies hardcoded API keys and insecure credential storage.
- Tool Poisoning Detection: Scans for hidden malicious instructions in tool descriptions.
- Parameter Injection Detection: Finds magic parameters that may extract sensitive AI context.
- Prompt Injection Scanning: Detects prompt manipulation and injection attacks.
- Input Validation Checks: Identifies command injection and path traversal issues.
Use cases of MCP Watch?
- Scanning GitHub repositories for security vulnerabilities in MCP servers.
- Ensuring compliance with security best practices in AI tool implementations.
- Identifying and mitigating risks associated with credential leaks and server spoofing.
FAQ from MCP Watch?
- Can MCP Watch scan any repository?
Yes, it can scan any GitHub repository that implements MCP.
- Is MCP Watch free to use?
Yes, MCP Watch is open-source and free to use.
- How accurate is the vulnerability detection?
MCP Watch is designed to be highly accurate, but results may vary based on the complexity of the implementation.
Recommend Servers
TraeBuild with Free GPT-4.1 & Claude 3.7. Fully MCP-Ready.
Zhipu Web SearchZhipu Web Search MCP Server is a search engine specifically designed for large models. It integrates four search engines, allowing users to flexibly compare and switch between them. Building upon the web crawling and ranking capabilities of traditional search engines, it enhances intent recognition capabilities, returning results more suitable for large model processing (such as webpage titles, URLs, summaries, site names, site icons, etc.). This helps AI applications achieve "dynamic knowledge acquisition" and "precise scenario adaptation" capabilities.
EdgeOne Pages MCPAn MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.
MCP AdvisorMCP Advisor & Installation - Use the right MCP server for your needs
Context7Context7 MCP Server -- Up-to-date code documentation for LLMs and AI code editors
Playwright McpPlaywright MCP server
AiimagemultistyleA Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.
CursorThe AI Code Editor
Jina AI MCP ToolsA Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.
WindsurfThe new purpose-built IDE to harness magic
Visual Studio Code - Open Source ("Code - OSS")Visual Studio Code
Tavily Mcp
Serper MCP ServerA Serper MCP Server
DeepChatYour AI Partner on Desktop
TimeA Model Context Protocol server that provides time and timezone conversion capabilities. This server enables LLMs to get current time information and perform timezone conversions using IANA timezone names, with automatic system timezone detection.
Howtocook Mcp基于Anduin2017 / HowToCook （程序员在家做饭指南）的mcp server，帮你推荐菜谱、规划膳食，解决“今天吃什么“的世纪难题；
Based on Anduin2017/HowToCook (Programmer's Guide to Cooking at Home), MCP Server helps you recommend recipes, plan meals, and solve the century old problem of "what to eat today"
Baidu Map百度地图核心API现已全面兼容MCP协议，是国内首家兼容MCP协议的地图服务商。
Amap Maps高德地图官方 MCP Server
ChatWiseThe second fastest AI chatbot™
MiniMax MCPOfficial MiniMax Model Context Protocol (MCP) server that enables interaction with powerful Text to Speech, image generation and video generation APIs.
BlenderBlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.