Scannd

Official registry Security

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package scannd-mcp
Claude Code
claude mcp add scannd -e 'SCANND_API_KEY=<your scannd_api_key>' -- npx -y scannd-mcp@0.1.0
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "scannd": {
            "command": "npx",
            "args": [
                "-y",
                "scannd-mcp@0.1.0"
            ],
            "env": {
                "SCANND_API_KEY": "<your scannd_api_key>"
            }
        }
    }
}

Environment variables

  • SCANND_API_KEY required secret Scannd API key (starts with sk_). Sent to the hosted API as the X-API-Key header. Get one at https://scannd.com; the free tier includes 2 scans/month.

Frequently asked questions

What is Scannd?

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

How do I install Scannd?

It runs on your machine. In Claude Code: claude mcp add scannd -e 'SCANND_API_KEY=<your scannd_api_key>' -- npx -y scannd-mcp@0.1.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Scannd need an API key?

Yes. It expects SCANND_API_KEY, which you set in its configuration.

Is Scannd open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Scannd?

It is published by zachforrest. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.