io.github.vpatser1/mcp-server-security-scanner

Official registry Security

Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package mcp-server-security-scanner
Claude Code
claude mcp add mcp-server-security-scanner -e 'LICENSE_KEY=<your license_key>' -- npx -y mcp-server-security-scanner@1.1.4
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "mcp-server-security-scanner": {
            "command": "npx",
            "args": [
                "-y",
                "mcp-server-security-scanner@1.1.4"
            ],
            "env": {
                "LICENSE_KEY": "<your license_key>"
            }
        }
    }
}

Environment variables

  • LICENSE_KEY secret License key (emailed after purchase at https://aivp-mcp.vercel.app). Omit for the free trial (3 calls per tool).

Frequently asked questions

What is io.github.vpatser1/mcp-server-security-scanner?

Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs

How do I install io.github.vpatser1/mcp-server-security-scanner?

It runs on your machine. In Claude Code: claude mcp add mcp-server-security-scanner -e 'LICENSE_KEY=<your license_key>' -- npx -y mcp-server-security-scanner@1.1.4. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.vpatser1/mcp-server-security-scanner need an API key?

Yes. It expects LICENSE_KEY, which you set in its configuration.

Who maintains io.github.vpatser1/mcp-server-security-scanner?

It is published by vpatser1. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.