MCP Configuration Security Scanner

Example Use Cases

• 1

  Detect exposed API keys and cloud credentials in MCP configs.

• 2

  Identify dangerous filesystem and command injection risks.

• 3

  Audit MCP configuration security settings for educational purposes.

Description

MCP Scan is an educational tool designed to identify exposed secrets, dangerous commands, and insecure settings in MCP configuration files. It provides colorful console output and structured JSON reports with sensitive data masking and report encryption. The tool is intended for learning MCP security concepts and should not be used for production security decisions. It supports scanning multiple config file formats and locations, offering detailed security issue categorization.