English Français العربية

io.github.fpetitit/mcpcheckup

Official registry Security

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http mcpcheckup 'https://mcpcheckup.xyz/api/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcpcheckup": {
            "type": "http",
            "url": "https://mcpcheckup.xyz/api/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

mcpcheck

A webcheck.xyz-style scanner for remote MCP servers.

Enter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:

  • Connectivity & Handshake — protocol negotiation, server info, advertised capabilities.
  • Tools, Resources & Prompts — full inventory with schemas.
  • Security Heuristics — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.
  • Network & TLS — certificate validity, HTTP security headers, CORS policy.
  • License Information — presence of a LICENSE file or license mention in server instructions.

Development

npm install
npm run dev

Open http://localhost:3000 and paste an MCP server URL to scan.

Notes

  • Only http:// and https:// targets are accepted; scanning private/internal IP ranges or localhost is blocked to prevent SSRF.
  • Security checks are heuristic, not a substitute for a manual security review.

Frequently asked questions

What is io.github.fpetitit/mcpcheckup?

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

How do I install io.github.fpetitit/mcpcheckup?

It runs as a remote server. In Claude Code: claude mcp add --transport http mcpcheckup 'https://mcpcheckup.xyz/api/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.fpetitit/mcpcheckup need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.fpetitit/mcpcheckup open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.fpetitit/mcpcheckup?

It is published by fpetitit. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.