mcp-guard

Local install

io.github.diegoperezg7/mcp-guard-scanv1.1.1 GitHub verified

Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.

Security

Watch Source

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-04T11:27:47.187573Z",
      "publishedAt": "2026-11-04T11:27:47.187573Z",
      "statusChangedAt": "2026-11-04T11:27:47.187573Z"
    }
  },
  "server": {
    "name": "io.github.diegoperezg7/mcp-guard-scan",
    "title": "mcp-guard",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "1.1.1",
    "packages": [
      {
        "version": "1.1.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "mcp-guard-scan",
        "registryType": "npm",
        "packageArguments": [
          {
            "type": "positional",
            "value": "serve"
          }
        ],
        "environmentVariables": [
          {
            "name": "MCP_GUARD_ALLOW_STDIO",
            "format": "string",
            "description": "Set to 1 to add scan_stdio_server, which starts the command it is given"
          },
          {
            "name": "MCP_GUARD_ALLOW_PRIVATE_NETWORK",
            "format": "string",
            "description": "Set to 1 to let scan_server reach local and private addresses, over http too"
          },
          {
            "name": "LOG_LEVEL",
            "format": "string",
            "default": "warn",
            "description": "pino log level; logs go to stderr"
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/diegoperezg7/mcp-guard-scan",
      "source": "github"
    },
    "description": "Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport."
  }
}

Maintain this server? Claim it

Try it

This server only runs locally, from a package. Install it with the instructions on this page to try it.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM Studio Add to Goose

Run in a terminal

claude mcp add mcp-guard-scan \
  -- npx -y [email protected]

Environment

MCP_GUARD_ALLOW_STDIO (optional, not in the config above): Set to 1 to add scan_stdio_server, which starts the command it is given
MCP_GUARD_ALLOW_PRIVATE_NETWORK (optional, not in the config above): Set to 1 to let scan_server reach local and private addresses, over http too
LOG_LEVEL (optional, not in the config above): pino log level; logs go to stderr

Tools

We don't run packages, so we can't list this server's tools.