Call for MCP Server Security Scans
tatar-sh · reddit · 2026-07-19
The author is continuing to accept MCP server submissions for scanning, noting that MCPRadar checks for multiple risk categories: tool poisoning and prompt injection, dangerous or misleading schemas, secret leakage and insecure configurations, vulnerable dependencies and supply chain risks, anomalous changes between server versions, and cross-server attack paths.
The public leaderboard displays scan coverage, findings, risk levels, and downloadable artifacts. New server additions require manual review, meaning submission requests do not automatically execute commands, and publication is not guaranteed.
The author also invites community feedback on: which servers to include, any false positives or disputed ratings, missing MCP attack vectors, and how to make the scoring methodology clearer.
Related event: MCPRadar Launches as Open-Source MCP Security Scanner(2 posts)→
More from coding & agent
- Is inference latency becoming the biggest bottleneck for production AI agents? — Euphoric_Sea632 · 2026-09-11
- Anthropic researcher: 99% of engineers now run swarms of 300+ self-improving agents — AlishaOutridge · 2026-09-11
- Gergely Orosz: Shipping 10x PRs With AI Agents, Sites Fill With Small Regressions — ducha_aiki · 2026-09-11
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11