MCP-Lattice MCP Server
panavinsingh/MCP-Lattice
Security scanner for Model Context Protocol (MCP) with capability graph analysis. Detects emergent attack chains across multi-server AI agent deployments that no individual tool scan can find.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
panavinsingh/MCP-Lattice is a Go MCP server licensed under Apache-2.0. Security scanner for Model Context Protocol (MCP) with capability graph analysis. Detects emergent attack chains across multi-server AI agent deployments that no individual tool scan can find.
Ranked #18 out of 100 indexed tools.
Actively maintained with commits in the last week.
Ecosystem
Score Breakdown
1 stars → early stage
Last commit 2d ago → actively maintained
No issues filed → no history to score
1 contributor → solo project
No dependents → no downstream usage
Weights: Freshness 25% · Issue Health 25% · Dependents 25% · Stars 15% · Contributors 10% · How we score →
How to Improve
Badge all embed codes →
[](https://agentrank-ai.com/tool/panavinsingh--MCP-Lattice/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/panavinsingh--MCP-Lattice/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/badge/tool/panavinsingh--MCP-Lattice" alt="AgentRank"></a> Matched Queries
From the README
# MCP-Lattice Open-source MCP security scanner with capability graph analysis. ## The Problem The Model Context Protocol (MCP) ecosystem has grown to over 10,000 servers, yet there is no comprehensive security tool to audit them. At least 25 CVEs and disclosure reports have documented vulnerabilities across tool poisoning, prompt injection, SSRF, and auth bypass classes. Existing scanners cover only a fraction of the attack surface and none analyze cross-server attack chains. MCP-Lattice fills that gap. ## What MCP-Lattice Does - **Auto-discovers** MCP configurations for Claude Desktop, Cursor, Windsurf, VS Code, and Gemini CLI - **34 detection templates** covering prompt injection, tool poisoning, code execution, auth bypass, data exfiltration, supply chain, privilege escalation, and DoS - **4-layer detection pipeline**: L1 Pattern matching (<1ms), L2 Semantic analysis (~20ms), L3 Capability graph (~50ms), L4 Causal/LLM (planned) - **4 output formats**: terminal table, JSON, SARIRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.