Lightweight Python scanner for MCP server security weaknesses
A Python scanner that inspects Model Context Protocol (MCP) servers for security weaknesses. Supports two modes: metadata scanning of live servers, and taint analysis of Python source code.
Rule Severity Description -------------------------------- MCP-001 HIGH Dangerous tool names (exec, shell, run, etc.) MCP-002 HIGH Prompt injection patterns in tool descriptions MCP-003 LOW Tools with no description MCP-004 HIGH SSRF-prone URL parameters with no declared validation MCP-005 MEDIUM Path-traversal-prone file parameters with no restriction MCP-006 LOW Parameters with no declared type constraint
Rule Severity Description -------------------------------- MCP-007 Variable Taint flows from tool parameters to dangerous sinks
The taint analyzer identifies tool entry points (decorator-based), traces parameter data flow through the function, detects when tainted values reach dangerous sinks (shell execution, code execution, SQL, file operations, network calls), and applies a validation agent to classify findings by risk context.
Metadata mode: Connects to an MCP server over stdio, calls tools/list, analyzes each tool's name, description, and input schema.
Taint mode: Parses Python source code with AST analysis. Finds functions decorated with @tool, @mcp.tool, @confluencemcp.tool(...), etc. Marks every parameter as a taint source. Tracks propagation through assignments and function calls. Reports when tainted data reaches: - Direct sinks: os.system, subprocess.run, eval, exec, open, requests.get, cursor.execute - Pass-through sinks: method calls on objects named client, fetcher,
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/indupriyamalempati--mcp-scanner.html)
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is
zhuyansen/new-term-radarDaily radar for new AI terms: names of new models, products and repos, caught on X, Hugging Face, GitHub and sitemaps before keyword tools list them.
yzg1226/mcd-party-officer🍟 麦当劳门店派对成团调度 Skill — 把派对从「策划」推进到「办得成」：成团概率雷达 / 包场vs拼团 / 择日黄历 / 儿童营养指数 / 招募卡与邀请函
fellowgeek/mcp-memoryAn OKF-backed Model Context Protocol (MCP) server delivering persistent long-term memory and SQLite FTS5 search for AI agents.
hirotomasato/yowesGenerate realistic teacher documents (ID cards, licenses, letters) for 13 countries via MCP.
hujjun/mcd-saver-strategist麦当劳省钱点餐助手（麦门精算师）｜麦当劳优惠券组合优化 Skill：拉取麦当劳菜单与全部可用优惠券，算出最省的点餐组合，巨无霸套餐 ¥47 → ¥21.9（省 53%）。McDonalds MCP（麦当劳 MCP）coupon optimizer · McDonalds China MCP Server · Agent Skill for WorkBuddy · 麦当劳程序员创意开发大赛参赛作品
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.