MCP.Market

MCPSentinel MCP server

by gentaArnezzi·io.github.gentaArnezzi/mcpsentinel·v0.8.8·1 stars
No reviews yet

Precision-first security scanning for Model Context Protocol servers.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars30 downloads/wk

Reviews

Write one

Nobody has reviewed MCPSentinel yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCPSentinel tools (1)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • scan_mcp_server

    Scan a server after operator-controlled target and egress authorization checks.

Public scan report

scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan24 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 16 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MCPSentinel compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 4,460 AI and agents servers
Tools
1
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 50% of 2,711 AI and agents servers
Downloads a week
30
more than 17% of 1,538 AI and agents servers with a package

What its tools let an agent do: 1 read

Release history: 2 versions in the registry since 2026-08-14, latest 2026-09-21, typically one every 38 days.

Install MCPSentinel in Claude Code, Cursor or VS Code

claude mcp add mcpsentinel -- uvx mcp-guardian-scan
Add to Cursor

What the publisher says

From the MCPSentinel repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.gentaArnezzi/mcpsentinel -->

MCPSentinel

+----------------------------------------------------------------+

+----------------------------------------------------------------+

Discover MCP metadata. Triage suspicious intent. Review changes before you trust them.

MCPSentinel is a precision-first security scanner for Model Context Protocol servers. It treats a static rule hit as a candidate, then applies semantic intent analysis before reporting it. This keeps the fast coverage of pattern matching without making every normal-looking fetch or delete tool a noisy vulnerability.

The default judge is an offline, deterministic heuristic—not an LLM. Optional OpenAI review transmits bounded, redacted metadata to OpenAI. Neither mode proves that a server's implementation is safe.

Version scope: v0.8.8. The PyPI badge above shows the published version; install from source if your installed release predates the features here. The M8ven badge concerns the source revision linked on its listing, not this working tree, package provenance, or measured detection accuracy. Read the dated engineering assessment for evidence and remaining gates.

Start in 60 seconds

python -m pip install mcp-guardian-scan
mcpsentinel                    # safe, no-write onboarding
mcpsentinel scan http://localhost:8000/mcp

The first command opens a friendly, copy-pasteable onboarding guide. Interactive terminals get colored panels; json and sarif remain free of decorative text for automation.

The review loop

discover metadata  ->  static candidates --------> semantic triage  -> human review
         |                                               ^                    |
         +-> every server instruction (MCP-S001) --------+                    v
                                                     explicitly approve baseline

What you get

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MCPSentinel: common questions

Is MCPSentinel MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the MCPSentinel safety report
How do I install MCPSentinel?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MCPSentinel need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is MCPSentinel maintained?
The last commit was 19 days ago (2026-10-16). The latest release is v0.8.8.
What can I use instead of MCPSentinel?
Servers from other publishers that do the same job: HOL Guard MCP server, Agent Recall MCP server and Shellward MCP server. Compare all MCPSentinel alternatives.
How does MCPSentinel compare with other AI and agents MCP servers?
safety score 92/100 (higher than 90% of 4,460 AI and agents servers); tools 1 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MCPSentinel

Same job from other publishers: the closest match first, then the best rated.

All MCPSentinel alternatives →
  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A
  • Agent Recall
    Correction-first agent memory. Precision KPI tracks if agents heed warnings. 5 layers, local-only.
    A
  • Shellward
    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
    A
  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • Agent-Native Chat
    Minimal chat-first app with durable threads, actions, and the app-agent loop
    A