mcp-scan
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Install
npmstdio
npx -y owasp-mcp-scan Client config (Claude Desktop, Cursor, Windsurf and most MCP clients)
{
"mcpServers": {
"io-github-codingselim-mcp-scan": {
"command": "npx",
"args": [
"-y",
"owasp-mcp-scan"
]
}
}
} Source: official MCP Registry record · registry name io.github.CodingSelim/mcp-scan · published 2026-07-11 · updated 2026-07-11. Not an endorsement; review the code before connecting it to anything sensitive.