English Français العربية

MCPAmpel - MCP Security Scanner

Registre officiel Sécurité

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

PYPI package mcpampel
Claude Code 
claude mcp add mcpampel-mcp-security-scanner -e 'MCPAMPEL_API_KEY=<your mcpampel_api_key>' -- uvx mcpampel==0.2.2
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcpampel-mcp-security-scanner": {
            "command": "uvx",
            "args": [
                "mcpampel==0.2.2"
            ],
            "env": {
                "MCPAMPEL_API_KEY": "<your mcpampel_api_key>"
            }
        }
    }
}

Variables d'environnement

  • MCPAMPEL_API_KEY obligatoire secret MCPAmpel API key (get one free at mcpampel.com)

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. MCPAmpel - MCP Security Scanner
  2. Quick Start
  3. Configuration
  4. Tools
  5. Development
  6. License

MCPAmpel - MCP Security Scanner

Scan your installed MCP servers for security vulnerabilities, directly from your AI agent.

MCPAmpel discovers MCP servers from your Claude Code, Cursor, Windsurf, or Gemini CLI configuration, submits them to 16 scanning engines, and returns an aggregated trust score with detailed findings.

50 API calls/day included.

Quick Start

uvx mcpampel

Configuration

Claude Code / Claude Desktop

Add to ~/.claude/settings.json or claude_desktop_config.json:

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}
Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}
Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}
Gemini CLI

Add to ~/.gemini/settings.json:

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}
Getting an API Key

Register for free at mcpampel.com.

Environment Variables
VariableRequiredDefaultDescription
MCPAMPEL_API_KEYYes-Your API key (free at mcpampel.com)
MCPAMPEL_BASE_URLNohttps://mcpampel.comAPI base URL

Tools

scan_my_servers

Discovers all MCP servers from your editor config and scans them with 16 engines. Returns a summary table with trust scores. No input needed.

scan_url

Scan a single GitHub, GitLab, npm, or PyPI URL. Returns trust score, engine breakdown, and findings.

ParameterTypeRequired
urlstringYes
check_status

Show your daily quota usage and remaining scans.

get_scan_results

Get detailed results for a specific scan by ID. Use after scan_my_servers or scan_url to drill into findings.

ParameterTypeRequired
scan_idstringYes

Development

cd mcp-plugin
uv sync
uv run pytest

License

Apache License 2.0

mcpampel.com

Questions fréquentes

Qu'est-ce que MCPAmpel - MCP Security Scanner ?

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

Comment installer MCPAmpel - MCP Security Scanner ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add mcpampel-mcp-security-scanner -e 'MCPAMPEL_API_KEY=<your mcpampel_api_key>' -- uvx mcpampel==0.2.2. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour MCPAmpel - MCP Security Scanner ?

Oui. Il attend MCPAMPEL_API_KEY, à renseigner dans sa configuration.

MCPAmpel - MCP Security Scanner est-il open source ?

Oui. Son code est sur GitHub sous licence Apache-2.0.

Qui maintient MCPAmpel - MCP Security Scanner ?

Il est publié par MCPAmpel. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.