Mcp-bandit focuses on detecting security vulnerabilities and prompt injection risks in MCP servers. It is catalogued under Security & compliance platforms on PulseGate.

Who is mcp-bandit for?

mcp-bandit is an open-source project built for security engineers.

Yes — mcp-bandit is open source under the MIT license and free to use.

What platforms does mcp-bandit run on?

mcp-bandit runs on the web and the command line.

Is mcp-bandit still active?

The GitHub repository shows 7 commits in the last 90 days.

What projects are similar to mcp-bandit?

Similar projects tracked by PulseGate include mcpsec, mcp-audit-scanner, and mcp-recon.

Who makes mcp-bandit?

mcp-bandit is developed by Giridhar Pandurangi.

How long has mcp-bandit been around?

mcp-bandit first shipped in 2026.

Back to the index

mcp-bandit

Name: mcp-bandit
Author: Giridhar Pandurangi

github.comInfrastructure

mcp-bandit is an open-source command-line tool for scanning Model Context Protocol (MCP) servers for security vulnerabilities, including prompt injection and SSRF. It is designed for security engineers to audit and analyze MCP deployments.

Open SourceMITWebCLI

Visit github.com

Overview

5 features

mcp-bandit sits in PulseGate's Security & compliance platforms category. It focuses on detecting security vulnerabilities and prompt injection risks in MCP servers. It is built as an open-source project for security engineers. mcp-bandit is open source under the MIT license. mcp-bandit is available on the web and the command line.

It is developed by Giridhar Pandurangi, and it first shipped in 2026. Development happens publicly on GitHub with 7 commits in the last 90 days. Key capabilities include MCP scanning, prompt injection detection, and static analysis. It exposes integrations via an MCP server.

Summary written by a language model from the project’s public pages.

MCP scanning
Prompt injection detection
Static analysis
Security auditing
CLI tool

Built with & integrations

Connectors

MCP

Runs on

BrowserCLI

Trust & compliance

License

MIT

Verified signals

HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed25 Jun · 22:53 UTC
Listing verified against its public source
Source: PulseGate · Open

Frequently asked questions about mcp-bandit

What is mcp-bandit?: Mcp-bandit focuses on detecting security vulnerabilities and prompt injection risks in MCP servers. It is catalogued under Security & compliance platforms on PulseGate.
Who is mcp-bandit for?: mcp-bandit is an open-source project built for security engineers.
Is mcp-bandit free?: Yes — mcp-bandit is open source under the MIT license and free to use.
What platforms does mcp-bandit run on?: mcp-bandit runs on the web and the command line.
Is mcp-bandit still active?: The GitHub repository shows 7 commits in the last 90 days.
What projects are similar to mcp-bandit?: Similar projects tracked by PulseGate include mcpsec, mcp-audit-scanner, and mcp-recon.mcpsec mcp-audit-scanner mcp-recon
Who makes mcp-bandit?: mcp-bandit is developed by Giridhar Pandurangi.
How long has mcp-bandit been around?: mcp-bandit first shipped in 2026.

At a glance

Platforms: Cli
Languages: English
Open source: Yes (GitHub)
License: MIT
Built for: security engineers
Model: Open source
Solves: Detecting security vulnerabilities and prompt injection risks in MCP servers.

Registered as

GitHub: giridharpandurangi/mcp-scan
PyPI: mcp-bandit

Developer

Giridhar Pandurangi

Solo developer

GitHub

Open source

View on GitHub

Stars: 0
Forks: 0
Open issues: 3
Last commit: 8 May 2026
Commits 90d: 7
Contributors: 1
Authorship: Solo
Default branch: master

Index record

Identity confidence: Low · 64
Indexed: 25 Jun 2026
Lifecycle: Alive
Last seen: 25 Jun 2026

Identity audit (12)

Slug: mcp-bandit-pypi-org
Lifecycle last checked: 8 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 25 Jun 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Canonical URL: https://github.com/giridharpandurangi/mcp-scan

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do