Mmcp.market

Is XploitScan MCP server safe?

Probably. Read the findings first.

C65/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings
  • Code scan1 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what XploitScan does

  • CodeInspectus
    Local-first MCP security scanner and CLI for AI-generated applications.
    C
  • ScanLabsAI Security Scanner
    Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
    B
  • MCP
    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
    A

XploitScan reviews, tools and install