sahiloj/MCPScan
Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
Platform-specific configuration:
{
"mcpServers": {
"MCPScan": {
"command": "npx",
"args": [
"-y",
"MCPScan"
]
}
}
}Add the config above to .claude/settings.json under the mcpServers key.
Loading reviews...