Open-source MCP scanner combines static analysis and live prompt-injection tests
KookyTax5493 · reddit · 2026-07-29
An open-source tool, mcp-scanner, targets a growing security problem for MCP servers: prompt injection through tool outputs.
- It combines static analysis and live probing.
- Static checks look for shell execution, unsafe deserialization, hardcoded secrets, unscoped tools, and missing input validation.
- Live tests connect as a real MCP client and fire prompt-injection payloads such as instruction override, role hijack, exfiltration, tool-chaining abuse, encoding tricks, and homoglyph attacks.
- Responses are judged with a two-stage system: keyword pre-filtering plus an LLM judge fallback.
- The author says it successfully caught an issue in the official mcp-server-fetch, where a poisoned page was echoed back unsanitized.
The project is open source on GitHub and the author is asking for production feedback on what would make it useful in real deployments.
Related event: Open-Source MCP Scanner Detects Injections and Leaked Secrets(2 posts)→
More from coding & agent
- Claude Code can build the same landing page twice, but only one version looks designed — PrajwalTomar_ · 2026-07-29
- Cline signs the open-weights letter and makes GLM 5.2 free — TheZachMueller · 2026-07-29
- A Weaviate extension now manages vector databases inside VS Code — CShorten30 · 2026-07-29
- ‘Prepare your personal vectorbooks’ turns note-taking into an AI meme — wavefnx · 2026-07-29
- ChatGPT demo shows MCP driving a 3D avatar with custom animations — BLUECOW009 · 2026-07-29
- tldraw shows how multiple LLM agents can collaborate on an infinite canvas — max__drake · 2026-07-29