English Français العربية

MCP Tool Poisoning Scanner

Official registry Other

Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http mcp-tool-poisoning-scanner 'https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner' --header 'Authorization: <Bearer <your Apify API token>. Get it at console.apify.com/settings/integrations>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcp-tool-poisoning-scanner": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner",
            "headers": {
                "Authorization": "<Bearer <your Apify API token>. Get it at console.apify.com/settings/integrations>"
            }
        }
    }
}

Frequently asked questions

What is MCP Tool Poisoning Scanner?

Scan MCP servers for tool poisoning, hidden instructions and silent tool changes. Runs on Apify.

How do I install MCP Tool Poisoning Scanner?

It runs as a remote server. In Claude Code: claude mcp add --transport http mcp-tool-poisoning-scanner 'https://mcp.apify.com/?tools=bigochelo/mcp-poisoning-scanner' --header 'Authorization: <Bearer <your Apify API token>. Get it at console.apify.com/settings/integrations>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does MCP Tool Poisoning Scanner need an API key?

Yes. It expects Authorization, which you set in its configuration.

Who maintains MCP Tool Poisoning Scanner?

It is published by marcepalacios12. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.