cisco-ai-defense/mcp-scanner

Health v2 · maintenance only

Adoption not part of the score

1051 stars · 132 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MCP Scanner is a Python tool and SDK from Cisco AI Defense that scans Model Context Protocol (MCP) servers, tools, prompts, and resources for security threats. It combines YARA rules, LLM-based analysis, and the Cisco AI Defense inspect API, and can run as a CLI or REST API server.

Use cases

• scan mcp servers for malicious tools before connecting agents
• audit ai agent supply chain for security threats
• detect tool poisoning in model context protocol servers
• scan pypi packages used by mcp servers for malware
• run mcp security scans in ci/cd pipelines
• check mcp server code for behavioral threats

When to choose

• you deploy or consume MCP servers and need to vet them for security findings
• you want multi-engine scanning (YARA, LLM, Cisco AI Defense) of MCP tools, prompts, and resources
• you need offline/static scanning of MCP server metadata for air-gapped or CI environments

When to avoid

• you need general-purpose vulnerability scanning of non-MCP software
• you require a fully self-contained scanner with no reliance on external APIs like Cisco AI Defense or VirusTotal
• you need runtime protection of agents rather than pre-deployment scanning

Facets

cli-tool · maturity active

security vulnerability-scanning mcp cli developer-tools security developer-tools large-language-models python cli cross-platform mcp-security supply-chain-security yara-rules llm-analysis ai-agent-supply-chain pypi-package-scanning virus-total ai-agents docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cisco-ai-defense/mcp-scanner")