Skip to content
Back to the index

mcp-scrutiny

PyPIInfrastructure

No liveness check has reached it yet; it is registered on PyPI and has been in the index since 10 Oct 2026. How this is checked

mcp-scrutiny is an open-source command-line scanner for Model Context Protocol servers. It combines static and semantic analysis to identify security issues such as tool poisoning and supply-chain risks, with SARIF output for security workflows.

Inferred · not functionally tested

Open SourceApache-2.0CLISelf-hosted
Visit PyPI

Overview

6 features

Purpose: Scanning MCP servers for security vulnerabilities, malicious tool behavior, and supply-chain risks.

Inferred · not functionally tested

Audience: developers and DevSecOps teams building or auditing MCP servers

Inferred · not functionally tested

Functions: data_extraction

Inferred · not functionally tested

Interfaces: API: unknown · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: Apache-2.0 · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org. These links do not verify the individual claims.

mcp-scrutiny sits in PulseGate's AI & LLM security category. Inferred · not functionally tested: It focuses on scanning MCP servers for security vulnerabilities, malicious tool behavior, and supply-chain risks. Inferred · not functionally tested: mcp-scrutiny is an open-source project aimed at developers and DevSecOps teams building or auditing MCP servers. Basis unknown · not verified: The project is open source (Apache-2.0). Basis unknown · not verified: It runs on the command line, and it can be self-hosted.

mcp-scrutiny first shipped in 2026. Inferred · not functionally tested: Among its 6 catalogued features are Static Analysis, Semantic Scanning, and MCP Server Audits. Basis unknown · not verified: Catalogued interfaces include an MCP server.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Static Analysis
  • Semantic Scanning
  • MCP Server Audits
  • SARIF Output
  • Tool Poisoning Detection
  • Supply-Chain Checks

Topics: Inferred · not functionally tested

Tags
mcp-securitystatic-analysissemantic-scanningsupply-chain-security

JSON profile · Text profile · Access guide

Built with & integrations

Connectors
MCP
Runs on
CLISelf-hosted

Trust & compliance

License
Apache-2.0
Public signals
HTTPSOpen SourceFree tier

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed10 Oct · 08:02 UTC
    mcp-scrutiny seen via PyPI Bulk Enumerator
    Source: PyPI Bulk Enumerator · Open

Frequently asked questions about mcp-scrutiny

What does mcp-scrutiny do?
Inferred · not functionally tested: Mcp-scrutiny focuses on scanning MCP servers for security vulnerabilities, malicious tool behavior, and supply-chain risks. It is catalogued under AI & LLM security on PulseGate.
Who should use mcp-scrutiny?
Inferred · not functionally tested: mcp-scrutiny is an open-source project built for developers and DevSecOps teams building or auditing MCP servers.
Is mcp-scrutiny free?
Basis unknown · not verified: Yes — mcp-scrutiny is open source under the Apache-2.0 license and free to use.
What platforms does mcp-scrutiny run on?
Basis unknown · not verified: mcp-scrutiny runs on the command line. It can also be self-hosted.
Is mcp-scrutiny still active?
Unverified. mcp-scrutiny has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
What projects are similar to mcp-scrutiny?
Similar projects tracked by PulseGate include mcp-guardian-scan, mcp-check-security, and mcp-security-scan.mcp-guardian-scanmcp-check-securitymcp-security-scan
When did mcp-scrutiny launch?
mcp-scrutiny first shipped in 2026.
Is mcp-scrutiny open source?
Basis unknown · not verified: Yes — mcp-scrutiny is open source under the Apache-2.0 license.

Similar projects

Closest matches by what these projects do