Skip to content

airblackbox/mcp-security-scanner

MCP Security Scanner

CI License Python 3.10+

Find vulnerabilities in AI agent tool definitions. Scans MCP tools for injection risks, credential leaks, dangerous patterns, path traversal, and missing input validation.

Checks

Check Risk Detects
Dangerous tools Critical execute_command, eval, rm, drop_table
Command injection Critical Shell metacharacters, backticks, $()
SQL injection High UNION SELECT, DROP, comment injection
Credential leaks Critical API keys, tokens, passwords in inputs
Path traversal High ../, /etc/passwd, Windows system paths
Missing validation Low Unbounded strings without constraints

Usage

pip install -e ".[dev]"
mcp-scan scan tools.json
mcp-scan scan tools.json --format json

Part of the AIR Platform

AIR Blackbox Gateway ecosystem.

License

Apache-2.0

About

Security scanner for Model Context Protocol (MCP) servers. Static + dynamic checks for path traversal, auth gaps, prompt injection surfaces. Produces SARIF output for GitHub code scanning.

Topics

Resources

License

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Contributors

Languages