MCP Security Scan

Example Use Cases

• 1

  Detect and prevent prompt injection attacks.

• 2

  Identify SSRF and server misuse vulnerabilities.

• 3

  Track data flow to spot leaks or taints in AI pipelines.

Description

mcp-scan-action performs automated security scans on AI systems, MCP servers, and language model pipelines to detect issues such as tool poisoning, SSRF, prompt injection, and data leaks. It integrates seamlessly with GitHub Actions and displays results directly in the GitHub Security tab without requiring API keys. This tool simplifies security scanning for developers and security teams, enabling early detection of vulnerabilities with minimal setup.