Static security scanner for MCP servers. POST a public GitHub URL, get severity counts, a score, and the top findings with file+line back. 37 rules across TypeScript, JavaScript, Python, Go, Rust, C#, Java, and Kotlin — every language with an official MCP SDK. Detects argument injection for npx/uvx/pipx/pnpx runner binaries (CWE-88), known CVEs in 40+ top packages, and the usual L0 discovery (transport, tool inventory, dependency pinning). This is a pattern detector, not an exploitability orac
Cross-referenced across 55 tracked directories
#53555
Popularity Rank
1 / 55
Listed In
Emerging
Adoption Stage
8/18/2026
First Seen
Recently added to the ecosystem
Score: 100/100
0 dependency vulnerabilities found
59b9f352-8cdc-44d3-9dd9-db3bfa521880
No description available
dustinpulver
MCP server for advanced web search using Tavily
planetabhi
A comprehensive local MCP server for Figma. Connect Figma with the Gemini CLI, Cursor, and Claude Desktop.
zhsama
A TypeScript-based MCP server that provides DuckDuckGo search functionality.