MCPAmpel - MCP Security Scanner
Scan installed MCP servers for security vulnerabilities with 16 detection engines.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
mcpampelclaude mcp add mcpampel-mcp-security-scanner -e 'MCPAMPEL_API_KEY=<your mcpampel_api_key>' -- uvx mcpampel==0.2.2
{
"mcpServers": {
"mcpampel-mcp-security-scanner": {
"command": "uvx",
"args": [
"mcpampel==0.2.2"
],
"env": {
"MCPAMPEL_API_KEY": "<your mcpampel_api_key>"
}
}
}
}
متغيرات البيئة
MCPAMPEL_API_KEYإلزامي سري MCPAmpel API key (get one free at mcpampel.com)
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
MCPAmpel - MCP Security Scanner
Scan your installed MCP servers for security vulnerabilities, directly from your AI agent.
MCPAmpel discovers MCP servers from your Claude Code, Cursor, Windsurf, or Gemini CLI configuration, submits them to 16 scanning engines, and returns an aggregated trust score with detailed findings.
50 API calls/day included.
Quick Start
uvx mcpampel
Configuration
Claude Code / Claude Desktop
Add to ~/.claude/settings.json or claude_desktop_config.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Cursor
Add to ~/.cursor/mcp.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Gemini CLI
Add to ~/.gemini/settings.json:
{
"mcpServers": {
"mcpampel": {
"command": "uvx",
"args": ["mcpampel"],
"env": {
"MCPAMPEL_API_KEY": "your_key_here"
}
}
}
}
Getting an API Key
Register for free at mcpampel.com.
Environment Variables
| Variable | Required | Default | Description |
|---|---|---|---|
MCPAMPEL_API_KEY | Yes | - | Your API key (free at mcpampel.com) |
MCPAMPEL_BASE_URL | No | https://mcpampel.com | API base URL |
Tools
scan_my_servers
Discovers all MCP servers from your editor config and scans them with 16 engines. Returns a summary table with trust scores. No input needed.
scan_url
Scan a single GitHub, GitLab, npm, or PyPI URL. Returns trust score, engine breakdown, and findings.
| Parameter | Type | Required |
|---|---|---|
url | string | Yes |
check_status
Show your daily quota usage and remaining scans.
get_scan_results
Get detailed results for a specific scan by ID. Use after scan_my_servers or scan_url to drill into findings.
| Parameter | Type | Required |
|---|---|---|
scan_id | string | Yes |
Development
cd mcp-plugin
uv sync
uv run pytest
License
Apache License 2.0
الأسئلة الشائعة
ما هو MCPAmpel - MCP Security Scanner؟
Scan installed MCP servers for security vulnerabilities with 16 detection engines.
كيف أثبّت MCPAmpel - MCP Security Scanner؟
يعمل على جهازك. في Claude Code: claude mcp add mcpampel-mcp-security-scanner -e 'MCPAMPEL_API_KEY=<your mcpampel_api_key>' -- uvx mcpampel==0.2.2. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج MCPAmpel - MCP Security Scanner إلى مفتاح API؟
نعم. يتطلب MCPAMPEL_API_KEY، وتضبطها في إعداداته.
هل MCPAmpel - MCP Security Scanner مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.
من يصون MCPAmpel - MCP Security Scanner؟
ينشره MCPAmpel. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.