MCP-Scan
MCP-Scan is a security scanning tool designed to analyze MCP servers for common vulnerabilities, including prompt injections, tool poisoning, and cross-origin escalations. It connects to configured MCP servers, retrieves tool descriptions, and scans them for security risks using local checks and remote verification via Invariant Guardrails. It helps ensure the security and integrity of MCP-based systems by detecting potential attack vectors and malicious configurations.
Added on:
Created by:
Apr 28 2025
MCP-Scan is a security scanning tool designed to analyze MCP servers for common vulnerabilities, including prompt injections, tool poisoning, and cross-origin escalations. It connects to configured MCP servers, retrieves tool descriptions, and scans them for security risks using local checks and remote verification via Invariant Guardrails. It helps ensure the security and integrity of MCP-based systems by detecting potential attack vectors and malicious configurations.
Added on:
Created by:
Apr 28 2025
Invariant Labs
Featured
- Create WhatsApp LinkFree WhatsApp link and QR generator with analytics, branded links, routing, and multi-agent chat features.
- ChatronixLLM aggregator that connects multiple AI models in one platform for comparison, integration, and automation.
- EdensignEdensign is an AI-driven virtual staging platform transforming real estate photos quickly and realistically.
- AirMusicAirMusic.ai generates high-quality AI music tracks from text prompts with style, mood customization, and stems export.
- AnimeShortsCreate stunning anime shorts effortlessly with cutting-edge AI technology.
- Elser AIAll-in-one AI video creation studio that turns any text and images into full videos up to 30 minutes.
- Seedance 1.5 ProSeedance 1.5 Pro is an AI-powered cinematic video generator with perfect lip-sync and real-time audio-video sync.
- FineVoiceClone, Design, and Create Expressive AI Voices in Seconds, with Perfect Sound Effects and Music.
- remio - Personal AI Assistantremio is an AI-powered personal knowledge hub that captures and organizes all your digital info automatically.
- ExpleeStart outreach RIGHT NOW with single-line description of your ICP
- Lease A BrainAI-powered team of expert virtual professionals ready to assist in diverse business tasks. Sign-up for a free trial.
- AI FIRSTConversational AI assistant automating research, browser tasks, web scraping, and file management through natural language.
- LTX-2 AIOpen-source LTX-2 generates 4K videos with native audio sync from text or image prompts, fast and production-ready.
- Camtasia onlineCamtasia Online is a free tool for screen recording and video editing, all from your web browser.
- PXZ AIPXZ.ai is an all-in-one AI platform offering tools for image, video, voice, writing, and chat creation.
- ThumbnailCreator.comAI-powered tool for creating stunning, professional YouTube thumbnails quickly and easily.
- EaseUS VoiceWaveFree, powerful voice changer for creative expression offline and online.
- SOLM8AI girlfriend you call, and chat with. Real voice conversations with memory. Every moment feels special with her.
- Qwen-Image-2512 AIQwen-Image-2512 is a fast, high-resolution AI image generator with native Chinese text support.
- ai song creatorCreate full-length, royalty-free AI-generated music up to 8 minutes with commercial license.
- SuperMaker AI Video GeneratorCreate stunning videos, music, and images effortlessly with SuperMaker.
- RSW Sora 2 AI StudioRemove Sora watermark instantly with AI-powered tool for zero quality loss and fast downloads.
- Manga Translator AIAI Manga Translator instantly translates manga images into multiple languages online.
- Avoid.soAvoid.so offers advanced AI humanizer technology to bypass AI detection algorithms seamlessly.
- FixArt AIFixArt AI offers free, unrestricted AI tools for image and video generation without sign-up.
- Funy AIAI bikini & kiss videos from images or text. Try the AI Clothes Changer & Image Generator!
- APIMartAPIMart offers unified access to 500+ AI models including GPT-5 and Claude 4.5 with cost savings.
- GobiiGobii lets teams create 24/7 autonomous digital workers to automate web research and routine tasks.
- Skywork.aiSkywork AI is an innovative tool to enhance productivity using AI.
- Remy - Newsletter SummarizerRemy automates newsletter management by summarizing emails into digestible insights.
- Refly.aiRefly.AI empowers non-technical creators to automate workflows using natural language and a visual canvas.
- yesTool.aiAll-in-one AI platform for creating videos, music, and images with no technical skills required.
- QoderQoder is an agentic coding platform for real software, Free to use the best model in preview.
- GLM ImageGLM Image combines hybrid AR and diffusion models to generate high-fidelity AI images with exceptional text rendering.
- Vertech AcademyVertech offers AI prompts designed to help students and teachers learn and teach effectively.
- PoYo APIPoYo.ai is a unified AI API platform for image, video, music and chat generation, built for developers.
- SharkFotoSharkFoto is an all-in-one AI-powered platform for creating and editing videos, images, and music efficiently.
- TattooAI AI Tattoo GeneratorAI Tattoo Generator creates personalized, high-quality tattoo designs quickly with advanced AI technology.
- RebelgrowthGrow your revenue from organic traffic on autopilot: Keyword research. SEO optimized articles and EVEN backlinks.
- Z Image Turbo AIZ Image Turbo is a super fast AI image generator creating stunning photorealistic art.
- codeflyingCodeFlying – Vibe Coding App Builder | Create Full-Stack Apps by Chatting with AI
- Vadu AIAll-in-one AI video & image generator with Sora 2, Veo 3, Kling, and 10+ top models.
- Yollo AIChat & create with your AI companion. Image to Video, AI Image Generator.
- WhatsApp Warmup ToolAI-powered WhatsApp warmup tool automates bulk messaging while preventing account bans.
- NanoPicNanoPic offers fast, high-quality conversational image editing powered by AI with 2K/4K output.
- BGRemoverEasily remove image backgrounds online with SharkFoto BGRemover.
- PippitElevate your content creation with Pippit's powerful AI tools!
- TextToHumanFree AI humanizer that instantly rewrites AI text into natural, human-like writing. No signup required.
- FalcoCutFalcoCut: web-based AI platform for video translation, avatar videos, voice cloning, face-swap and short video generation.
- FlowithFlowith is a canvas-based agentic workspace which offers free 🍌Nano Banana Pro and other effective models...
- VoxDeckNext-gen AI presentation maker，Turn your ideas & docs into attention-grabbing slides with AI.
- Telegram Group BotTGDesk is an all-in-one Telegram Group Bot to capture leads, boost engagement, and grow communities.
- Wollo.aiWollo allows you to create, explore, and chat with AI characters using advanced, emotionally aware AI technology.
Flowith
Flowith is a canvas-based agentic workspace which offers free 🍌Nano Banana Pro and other effective models...
Refly.ai
Refly.AI empowers non-technical creators to automate workflows using natural language and a visual canvas.
BGRemover
Easily remove image backgrounds online with SharkFoto BGRemover.
FixArt AI
FixArt AI offers free, unrestricted AI tools for image and video generation without sign-up.
FineVoice
Clone, Design, and Create Expressive AI Voices in Seconds, with Perfect Sound Effects and Music.
Elser AI
All-in-one AI video creation studio that turns any text and images into full videos up to 30 minutes.
Yollo AI
Chat & create with your AI companion. Image to Video, AI Image Generator.
Skywork.ai
Skywork AI is an innovative tool to enhance productivity using AI.
Qoder
Qoder is an agentic coding platform for real software, Free to use the best model in preview.
VoxDeck
Next-gen AI presentation maker，Turn your ideas & docs into attention-grabbing slides with AI.
SharkFoto
SharkFoto is an all-in-one AI-powered platform for creating and editing videos, images, and music efficiently.
Funy AI
AI bikini & kiss videos from images or text. Try the AI Clothes Changer & Image Generator!
ThumbnailCreator.com
AI-powered tool for creating stunning, professional YouTube thumbnails quickly and easily.
Pippit
Elevate your content creation with Pippit's powerful AI tools!
SuperMaker AI Video Generator
Create stunning videos, music, and images effortlessly with SuperMaker.
AnimeShorts
Create stunning anime shorts effortlessly with cutting-edge AI technology.
GLM Image
GLM Image combines hybrid AR and diffusion models to generate high-fidelity AI images with exceptional text rendering.
Create WhatsApp Link
Free WhatsApp link and QR generator with analytics, branded links, routing, and multi-agent chat features.
Gobii
Gobii lets teams create 24/7 autonomous digital workers to automate web research and routine tasks.
TextToHuman
Free AI humanizer that instantly rewrites AI text into natural, human-like writing. No signup required.
AI FIRST
Conversational AI assistant automating research, browser tasks, web scraping, and file management through natural language.
LTX-2 AI
Open-source LTX-2 generates 4K videos with native audio sync from text or image prompts, fast and production-ready.
AirMusic
AirMusic.ai generates high-quality AI music tracks from text prompts with style, mood customization, and stems export.
Manga Translator AI
AI Manga Translator instantly translates manga images into multiple languages online.
Qwen-Image-2512 AI
Qwen-Image-2512 is a fast, high-resolution AI image generator with native Chinese text support.
WhatsApp Warmup Tool
AI-powered WhatsApp warmup tool automates bulk messaging while preventing account bans.
FalcoCut
FalcoCut: web-based AI platform for video translation, avatar videos, voice cloning, face-swap and short video generation.
ai song creator
Create full-length, royalty-free AI-generated music up to 8 minutes with commercial license.
SOLM8
AI girlfriend you call, and chat with. Real voice conversations with memory. Every moment feels special with her.
Telegram Group Bot
TGDesk is an all-in-one Telegram Group Bot to capture leads, boost engagement, and grow communities.
PoYo API
PoYo.ai is a unified AI API platform for image, video, music and chat generation, built for developers.
Remy - Newsletter Summarizer
Remy automates newsletter management by summarizing emails into digestible insights.
Seedance 1.5 Pro
Seedance 1.5 Pro is an AI-powered cinematic video generator with perfect lip-sync and real-time audio-video sync.
RSW Sora 2 AI Studio
Remove Sora watermark instantly with AI-powered tool for zero quality loss and fast downloads.
APIMart
APIMart offers unified access to 500+ AI models including GPT-5 and Claude 4.5 with cost savings.
Vertech Academy
Vertech offers AI prompts designed to help students and teachers learn and teach effectively.
Explee
Start outreach RIGHT NOW with single-line description of your ICP
Vadu AI
All-in-one AI video & image generator with Sora 2, Veo 3, Kling, and 10+ top models.
Lease A Brain
AI-powered team of expert virtual professionals ready to assist in diverse business tasks. Sign-up for a free trial.
NanoPic
NanoPic offers fast, high-quality conversational image editing powered by AI with 2K/4K output.
Rebelgrowth
Grow your revenue from organic traffic on autopilot:
Keyword research. SEO optimized articles and EVEN backlinks.
Edensign
Edensign is an AI-driven virtual staging platform transforming real estate photos quickly and realistically.
Wollo.ai
Wollo allows you to create, explore, and chat with AI characters using advanced, emotionally aware AI technology.
codeflying
CodeFlying – Vibe Coding App Builder | Create Full-Stack Apps by Chatting with AI
Camtasia online
Camtasia Online is a free tool for screen recording and video editing, all from your web browser.
remio - Personal AI Assistant
remio is an AI-powered personal knowledge hub that captures and organizes all your digital info automatically.
TattooAI AI Tattoo Generator
AI Tattoo Generator creates personalized, high-quality tattoo designs quickly with advanced AI technology.
PXZ AI
PXZ.ai is an all-in-one AI platform offering tools for image, video, voice, writing, and chat creation.
yesTool.ai
All-in-one AI platform for creating videos, music, and images with no technical skills required.
Avoid.so
Avoid.so offers advanced AI humanizer technology to bypass AI detection algorithms seamlessly.
Chatronix
LLM aggregator that connects multiple AI models in one platform for comparison, integration, and automation.
Z Image Turbo AI
Z Image Turbo is a super fast AI image generator creating stunning photorealistic art.
EaseUS VoiceWave
Free, powerful voice changer for creative expression offline and online.
What is MCP-Scan?
MCP-Scan is a comprehensive security scanner focused on Model Context Protocol (MCP) servers. It inspects your installed MCP server configurations, connects to these servers, and retrieves detailed descriptions of their tools. The scanner then analyzes these descriptions for common security issues such as prompt injections, tool poisoning, cross-origin escalations, and MCP rug pull attacks. It utilizes both local checks and remote verification with Invariant Guardrails, sharing minimal data about tools for security analysis. MCP-Scan helps developers and security teams monitor and secure their MCP ecosystems by offering in-depth scans, vulnerability detection, and tool inspection capabilities, ensuring safer and more reliable MCP deployments.
Who will use MCP-Scan?
- Security researchers
- DevOps teams managing MCP server environments
- Developers deploying MCP applications
- Security auditors
How to use the MCP-Scan?
- Step1: Install MCP-Scan via the provided command or package manager.
- Step2: Configure MCP server addresses in the configuration file if necessary.
- Step3: Run a default scan using `mcp-scan` to analyze MCP servers for vulnerabilities.
- Step4: Review the scan reports for detected issues and possible vulnerabilities.
- Step5: Use the inspect command to analyze specific tools or prompts.
- Step6: Manage the whitelist to approve or exclude trusted tools or entities.
MCP-Scan's Core Features & Benefits
The Core Features
- Scan MCP configurations for security vulnerabilities
- Inspect tool descriptions
- Manage whitelist of trusted entities
- Detect prompt injection and tool poisoning
- Identify cross-origin escalation attacks
- Tool pinning for detecting MCP rug pulls
The Benefits
- Enhances MCP ecosystem security
- Automates vulnerability detection
- Provides detailed insights into MCP tool configurations
- Reduces risk of security breaches
- Supports compliance and security audits
MCP-Scan's Main Use Cases & Applications
- Security auditing of MCP-based AI environments
- Monitoring MCP server integrity over time
- Pre-deployment security assessments of MCP configurations
- Incident response by identifying malicious or compromised tools
- Automated security verification in CI/CD pipelines
FAQs of MCP-Scan
Developer
- invariantlabs-ai
You may also like:
Developer Tools
A desktop application for managing server and client interactions with comprehensive functionalities.
A Model Context Protocol server for Eagle that manages data exchange between Eagle app and data sources.
A chat-based client that integrates and uses various MCP tools directly within a chat environment for enhanced productivity.
A Docker image hosting multiple MCP servers accessible through a unified entry point with supergateway integration.
Provides access to YNAB account balances, transactions, and transaction creation through MCP protocol.
A fast, scalable MCP server for managing real-time multi-client Zerodha trading operations.
A remote SSH client facilitating secure, proxy-based access to MCP servers for remote tool utilization.
A Spring-based MCP server integrating AI capabilities for managing and processing Minecraft mod communication protocols.
A minimalistic MCP client with essential chat features, supporting multiple models and contextual interactions.
A secure MCP server enabling AI agents to interact with Authenticator App for 2FA codes and passwords.
Research And Data
A server implementation supporting Model Context Protocol, integrating CRIC's industrial AI capabilities.
Provides real-time traffic, air quality, weather, and bike-sharing data for Valencia city in a unified platform.
A React application demonstrating integration with Supabase via MCP tools and Tambo for UI component registration.
A MCP client integrating Brave Search API for web searches, utilizing MCP protocol for efficient communication.
A protocol server enabling seamless communication between Umbraco CMS and external applications.
NOL integrates LangChain and Open Router to create a multi-client MCP server using Next.js
Connects LLMs to Firebolt Data Warehouse for autonomous querying, data access, and insight generation.
A client framework for connecting AI agents to MCP servers, enabling tool discovery and integration.
Spring Link facilitates linking and managing multiple Spring Boot applications efficiently within a unified environment.
An open-source client to interact with multiple MCP servers, enabling seamless tool access for Claude.
Security
A Python-based MCP server enabling secure management and automation of OPNsense firewalls via API.
Enables interaction with SharePoint Online via REST API, supporting site, list, and user management functions.
A MCP server wrapper enabling full protocol utilization without tool limits or context overload.
A wrapper around MCP server to select which tools to expose to mcp clients, enhancing control and safety.
Securely run MCP servers without modifying configs by managing secrets safely through the launcher.
An advanced SSH client supporting MCP with security checks, session management, and confidential logging features.
Provides secure, relative filesystem access for AI agents with batch operations and detailed error reporting.
A client for connecting to MCP servers, enabling AI agents to discover and utilize tools via MCP protocol.
A server for sending notifications to self-hosted ntfy servers with secure token authentication support.
A client application for secure quantum-safe interactions with MCP environments using post-quantum cryptography.