{"name":"io.github.CodingSelim/mcp-scan","slug":"codingselim-mcp-scan","title":"mcp-scan","description":"Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.","url":"https://mcp.market/server/codingselim-mcp-scan","rating":null,"grade":"A","score":88,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":21,"stars":0,"forks":0,"downloads_week":38,"last_push_at":"2026-08-01T07:46:45.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/CodingSelim/mcp-scan","website":"https://github.com/CodingSelim/mcp-scan","version":"0.2.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"owasp-mcp-scan","version":"0.2.1","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"--serve","type":"positional"}]}],"tools":[{"name":"list_checks","description":"List the security checks mcp-scan runs and their OWASP MCP Top 10 mapping. Takes no arguments.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_mcp_server","description":"Audit a Model Context Protocol server against the OWASP MCP Top 10 and return a graded (A-F) security report. Pass a stdio target ('command' plus optional 'args'/'env') OR a remote 'url' (with optional 'headers'). Passive: it enumerates the server's advertised tools/prompts/resources and analyzes them statically, never invoking tools. Scanning a stdio target spawns that command, so only scan serve","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":88,"grade":"A","scanned_at":"2026-09-26T05:12:42.944Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T05:12:42.984Z","components":{"code":{"score":25,"max":25,"notes":["57 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 56 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"owasp-mcp-scan","version":"0.2.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-07-11T19:21:31.748Z","weeklyDownloads":38}],"repo":{"found":true,"owner":"CodingSelim","repo":"mcp-scan","archived":false,"pushedAt":"2026-08-01T07:46:45Z","stars":0,"forks":0,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/139068169?v=4","ownerCreatedAt":"2023-07-09T16:57:52Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/139068169?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":38,"license":"MIT","lastPushAt":"2026-08-01T07:46:45.000Z","score":21}}}},"grade_history":[],"reviews":[]}