Free, read-only security scanner for remote MCP servers, before you connect them.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Runs a free, read-only security scan of a remote MCP server before you connect it. Performs an ordinary MCP handshake (never anything more invasive), lists the server's tools, rates each one's capabilities (private-data access, untrusted content, network egress, destructive actions), flags prompt-injection patterns in tool descriptions, and reports whether the lethal trifecta is reachable. Scan only servers you run or are entitled to connect to.
The https:// URL of the remote MCP server to scan
Runs a free, read-only security scan of a remote MCP server before you connect it. Performs an ordinary MCP handshake (never anything more invasive), lists the server's tools, rates each one's capabilities (private-data access, untrusted content, network egress, destructive actions), flags prompt-injection patterns in tool descriptions, and reports whether the lethal trifecta is reachable. Scan only servers you run or are entitled to connect to.
| Argument | Type | Description |
|---|---|---|
| url* |
| string |
| The https:// URL of the remote MCP server to scan |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"description": "The https:// URL of the remote MCP server to scan"
}
}
}