MCPSafe

MCPSafe is a free MCP server security scanner for checking whether a server is safe to install. It is built for developers vetting MCP servers before installation and for registry operators publishing safe catalogs. The service describes its checks as being backed by static analysis and five LLMs, and it offers both a fast verdict in about three minutes and a deeper LLM-judge consensus run in about twenty minutes.

Its checks cover several named areas. Typosquatting flags lookalike package names, unverified publishers, and unpinned dependencies before they reach an install chain. Static analysis is used to detect command injection, SQL injection, SSRF, path traversal, and hardcoded secrets. The LLM consensus layer uses five independent LLM judges to uncover tool poisoning, silent rug pulls, indirect prompt injection, and obfuscated intent that pattern matching misses. A permission audit examines each tool’s real-world reach and flags excessive permissions, weak authentication, and network exposure beyond its stated purpose.

MCPSafe accepts multiple source types. The scan flow says users can paste an MCP source from GitHub, an npm scoped package, or a pip package, and the FAQ adds support for GitHub URLs, npm packages, PyPI packages, Docker images from Docker Hub or GHCR, and MCP registry IDs. It normalizes those inputs, runs typosquat, static, behavioral, readiness, and 5-LLM consensus analysis in parallel, and returns an AIVSS 0–10 score with per-tool findings, CWE mapping, and copy-safe config. It also notes that already-scanned servers return in under a second and that it re-verifies on every new commit.

The scanner is free to use, with no credit card required and no signup required for scanning. Signed-in users get higher rate limits and scan history. It is delivered as a web service, includes a live SVG badge for scanned packages, and is marked as made in Germany. The page also describes public packages as free and private repos as available for teams shipping their own.