MCP.Market

Scannd MCP server

by scannd.com·com.scannd/scannd·v0.1.0
No reviews yet

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
New

41 downloads/wk

Reviews

Write one

Nobody has reviewed Scannd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Scannd tools (8)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_domain_summary

    Get a high-level summary of a target: subscription tier, scan history, and vulnerability counts from the most recent scan. Specify which target with target_id (or domain); defaults to the only accessible target if the key can act on just one.

  • get_report

    Get the full content of a specific report, or the latest report for a target if report_id is omitted.

  • get_scan_status

    Poll the status of a previously triggered scan.

  • get_vulnerabilities

    Get findings from a target's report, optionally filtered by severity.

  • list_reports

    List past scan reports for a target (metadata only).

  • list_targets

    List the targets this API key can act on (id, domain, label). Use this to discover a target_id to pass to the other tools when the account has more than one target.

  • list_templates

    List the scan tiers available to trigger_scan.

  • trigger_scan

    Queue a security scan for one of the account's targets. Returns a scan_id to poll with get_scan_status. Specify which target with target_id (or domain); if the API key can act on exactly one target it is used by default, otherwise target_id is required (call list_targets to discover options).

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan11 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityverified namespace with website, no repo4/10
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Scannd compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 915 Security servers
Tools
8
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
41
more than 33% of 248 Security servers with a package

What its tools let an agent do: 7 read · 1 run or deploy

Install Scannd in Claude Code, Cursor or VS Code

Runs npx -y scannd-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add scannd -- npx -y scannd-mcp
Add to Cursor

Scannd: common questions

Is Scannd MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the Scannd safety report
How do I install Scannd?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Scannd need an API key?
Yes. The registry entry asks for SCANND_API_KEY.
Is Scannd maintained?
The latest release is v0.1.0.
What can I use instead of Scannd?
Servers from other publishers that do the same job: MCP ZAP Server MCP server, Inkog MCP server and Solana Security Standard MCP server.
How does Scannd compare with other Security MCP servers?
safety score 58/100 (higher than 13% of 915 Security servers); tools 8 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Scannd

Same job from other publishers: the closest match first, then the best rated.

  • MCP ZAP Server
    Safe, self-hosted ZAP operator for guided AI security scans and reports.
    B
  • Inkog
    Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
    B
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A
  • OpenQR
    Generate, edit and track dynamic (editable) QR codes with scan analytics. Hosted MCP and REST API.
    B
  • pkgxray
    Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
    B