Skip to content
Back to the index

mcpsweep

PyPIInfrastructure

PulseGate's liveness check found it on 3 Oct 2026; it is registered on PyPI and has been in the index since 14 Aug 2026. How this is checked

mcpsweep is an open-source command-line scanner for discovering and fingerprinting MCP-over-HTTP servers. It enumerates exposed tools and applies risk heuristics for security and application-security assessments.

Inferred · not functionally tested

Open SourceMITCLISelf-hosted
Visit PyPI

Overview

5 features

Purpose: Identifying MCP-over-HTTP servers, exposed tools, and potential security risks during reconnaissance.

Inferred · not functionally tested

Audience: security researchers and application-security engineers

Inferred · not functionally tested

Functions: Unknown

Interfaces: API: unknown · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org. These links do not verify the individual claims.

mcpsweep sits in PulseGate's Penetration testing & red teaming category. Inferred · not functionally tested: It focuses on identifying MCP-over-HTTP servers, exposed tools, and potential security risks during reconnaissance. Inferred · not functionally tested: mcpsweep is an open-source project aimed at security researchers and application-security engineers. Basis unknown · not verified: mcpsweep is open source under the MIT license. Basis unknown · not verified: mcpsweep is available on the command line, and it can be self-hosted.

mcpsweep first shipped in 2026. Inferred · not functionally tested: Among its 5 catalogued features are server discovery, tool enumeration, and server fingerprinting. Basis unknown · not verified: Catalogued interfaces include an MCP server.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Server discovery
  • Tool enumeration
  • Server fingerprinting
  • Risk heuristics
  • MCP scanning

Topics: Inferred · not functionally tested

Tags
mcp-securityserver-discoverytool-enumerationappsec-scanner

JSON profile · Text profile · Access guide

Built with & integrations

Connectors
MCP
Runs on
CLISelf-hosted

Trust & compliance

License
MIT
Public signals
HTTPSOpen SourceFree tier

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed14 Aug · 19:40 UTC
    mcpsweep seen via PyPI Bulk Enumerator
    Source: PyPI Bulk Enumerator · Open

Frequently asked questions about mcpsweep

What does mcpsweep do?
Inferred · not functionally tested: Mcpsweep focuses on identifying MCP-over-HTTP servers, exposed tools, and potential security risks during reconnaissance. It is catalogued under Penetration testing & red teaming on PulseGate.
Who is mcpsweep for?
Inferred · not functionally tested: mcpsweep is an open-source project built for security researchers and application-security engineers.
Is mcpsweep free?
Basis unknown · not verified: Yes — mcpsweep is open source under the MIT license and free to use.
What platforms does mcpsweep run on?
Basis unknown · not verified: mcpsweep runs on the command line. It can also be self-hosted.
Is mcpsweep still active?
PulseGate's liveness check found it on 3 Oct 2026.
What are alternatives to mcpsweep?
Similar projects tracked by PulseGate include mcpsecscan, endpointsweep, and mcpscan-cli.mcpsecscanendpointsweepmcpscan-cli
How long has mcpsweep been around?
mcpsweep first shipped in 2026.
Is mcpsweep open source?
Basis unknown · not verified: Yes — mcpsweep is open source under the MIT license.

Similar projects

Closest matches by what these projects do