MCPScan MCP Server
sahiloj/MCPScan
Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
sahiloj/MCPScan is a TypeScript MCP server licensed under MIT. Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
Ranked #262 out of 25022 indexed tools.
In the top 2% of all indexed tools.
Ecosystem
Score Breakdown
12 stars → early stage
Last commit 6mo ago → stale
No issues filed → no history to score
0 contributors → solo project
No dependents → no downstream usage
Weights: Freshness 25% · Issue Health 25% · Dependents 25% · Stars 15% · Contributors 10% · How we score →
How to Improve
Matched Queries
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.