Vector Store Scanner MCP server

by 4hmetuyar·io.github.4hmetuyar/vector-store-scanner·v0.1.1·1 stars

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

A86/100grade A

What users say

No reviews yet

Safety scan

A86/100

Adoption

Growing

1 stars369 downloads/wk

Reviews

Nobody has reviewed Vector Store Scanner yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

list_patterns
List the vector-store types this scanner can fingerprint, and what unauthenticated-access checks it runs for each
scan_endpoint
Probe a vector-database (or vector-index-capable) endpoint for unauthenticated exposure — Weaviate, Qdrant, Chroma, Elasticsearch/OpenSearch (HTTP fingerprinting, escalating from instance info → collection/schema listing → actual stored data), Redis (RESP PING without AUTH), and Postgres/pgvector (wire-protocol SSLRequest + StartupMessage handshake, no real credentials sent). Read-only — never wri

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

no findings

Code scan19 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identitynamespace and repository owner differ4/10

Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @guardbee/mcp-vector-store-scanner on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vector-store-scanner -- npx -y @guardbee/mcp-vector-store-scanner

From the Vector Store Scanner repository's README, as published. We do not edit it. Read it on GitHub

🇬🇧 English | 🇹🇷 Türkçe | 🇨🇳 中文

guardbee.ai — AI Security Copilot for websites.

GuardBee's family of MCP (Model Context Protocol) servers — a single monorepo, independent npm packages.

Nothing above is checked by us. What we check is on the safety report.

Is Vector Store Scanner MCP server safe?: Yes, by our scan: it is graded A (86/100). Read the Vector Store Scanner safety report
How do I install Vector Store Scanner?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Vector Store Scanner need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Vector Store Scanner maintained?: The last commit was 12 days ago (2026-10-01). The latest release is v0.1.1.
What can I use instead of Vector Store Scanner?: Servers from other publishers that do the same job: Heimdall MCP server, SentinelOne MCP server and Apify MCP server. Compare all Vector Store Scanner alternatives.

Same job from other publishers: the closest match first, then the best rated.

Heimdall
Every App Store Connect + StoreKit 2 endpoint. 902 tools in 13 profiles, narrow to 27.
not reviewed
Established
B
SentinelOne MCP
Every SentinelOne v2.1 management endpoint, plus an offline SQLite store and cross-entity analytics
More from Servosity →
not reviewed
Growing
B
Apify
Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
not reviewed
Established
A
Buywhere
Agent-native product catalog: 300M+ products, 150,000+ stores, deliver_to ranking.
not reviewed
Growing
A
NativeKeel
React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings
not reviewed
Growing
A