mcp-security-scanner

Name: mcp-security-scanner
Availability: InStock
Author: contextware

Scan networks for unprotected MCP servers and report authentication status.

Updated Aug 23, 2026

Search Tags:#security #audit #mcp #network #scanning #contextware

Ready to run

npx skills add https://github.com/contextware/skills --skill mcp-security-scanner

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: mcp-security-scanner
Source: https://github.com/contextware/skills/tree/main/skills/mcp-security-scanner
Command: npx skills add https://github.com/contextware/skills --skill mcp-security-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and audit potentially unprotected MCP servers on your network, enhancing the security posture of your AI development environment.

Core Features & Use Cases

Network Scanning: Detects MCP servers across specified network ranges or local hosts.
Configuration Auditing: Checks common AI tool configurations for exposed MCP endpoints.
Security Reporting: Flags servers that lack authentication and provides remediation advice.
Use Case: You suspect an MCP server might be accessible without proper authentication. This skill can scan your local network to identify such servers and report their status.

Quick Start

Use the mcp-security-scanner skill to perform a network scan of localhost.

Frequently Asked Questions about mcp-security-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my local network for unprotected MCP servers?▼

Scanning for unprotected MCP servers uses the mcp-security-scanner to detect active endpoints across specified local network ranges. It reports the authentication status of each detected server to flag those lacking proper access controls.

What is MCP server security auditing and why do I need it?▼

MCP server security auditing detects exposed AI tool endpoints and checks their authentication status. It is needed to identify unprotected servers on your network, preventing unauthorized access to your AI development environment.

Do I need Node.js to audit MCP servers for exposed endpoints?▼

Yes, auditing MCP servers requires Node.js version 18 or higher. You also need network access to perform the scan and detect servers across specified network ranges or local hosts.

Can I check my AI tool configurations for exposed MCP endpoints?▼

Yes, configuration auditing checks common AI tool configurations for exposed MCP endpoints. The scanner flags any servers lacking authentication and provides specific remediation advice to secure them.

What does the MCP security scanner report when it finds unauthenticated servers?▼

When the MCP security scanner finds unauthenticated servers, it flags them in a security report and provides remediation advice. This helps you identify exposed endpoints and secure your local AI tools.

Does mcp-security-scanner work without external dependencies?▼

The mcp-security-scanner operates using the @contextware/mcp-scan package to perform network scans. It requires Node.js 18+ and network access but lists no additional external dependencies.