Call for MCP Server Security Scans
tatar-sh · reddit · 2026-07-19
The author is continuing to accept MCP server submissions for scanning, noting that MCPRadar checks for multiple risk categories: tool poisoning and prompt injection, dangerous or misleading schemas, secret leakage and insecure configurations, vulnerable dependencies and supply chain risks, anomalous changes between server versions, and cross-server attack paths.
The public leaderboard displays scan coverage, findings, risk levels, and downloadable artifacts. New server additions require manual review, meaning submission requests do not automatically execute commands, and publication is not guaranteed.
The author also invites community feedback on: which servers to include, any false positives or disputed ratings, missing MCP attack vectors, and how to make the scoring methodology clearer.
Related event: MCPRadar Launches as Open-Source MCP Security Scanner(2 posts)→
More from coding & agent
- AIE Code Summit 2026 opens applications: 800 seats, keynotes streamed free — trq212 · 2026-10-27
- TRL adds Score Centering, a simple fix for RLHF training instability — lvwerra · 2026-10-27
- Precompute golden answers and match at runtime for exact wording control — colinmcnamara · 2026-10-27
- Dev argues there's still alpha in working with your coding agent interactively — alex_frantic · 2026-10-27
- Researchers launch AMA on patterns for safer AI agents used by citizen developers — Loose_Rip359 · 2026-10-27
- Gradio Adds In-Chat Human-in-the-Loop So ML Intern Pauses Before Training — Gradio · 2026-10-27