Provenancewhere it came from, and what was verified
Published to the official MCP registry by github.com/codingselim, which proved it owns this namespace.
🛡 Permissions & trustwhat this server can touch before you run it
No permission details are published for this server yet. Check the source before you run it.
About
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Packages & transports
Computed from the server's own data, not a hidden formula. This measures how much you can depend on it, not how popular it is. Stars are shown separately, on purpose. How it's scored →
Raise this grade
up to +16 on qualityOwn this server? Here's exactly what to change, biggest wins first. Every number below is a fixed point value, so you can see what each edit is worth before you make it.
With no reviews this sits at a neutral 11. Reviews reporting it works push it toward the full 20.
Add an SPDX license (like MIT or Apache-2.0) to the repo so it's detected.
Already earned (4) ▾Already earned (4) ▴
These are structural checks, so the fixes are exact. See the full formula →
Reviews
Sign in to leave a reviewNo reviews yet. Be the first to say whether it worked.
{
"mcpServers": {
"mcp_scan": {
"command": "npx",
"args": [
"-y",
"owasp-mcp-scan"
]
}
}
}▶ Try itrun it locally
This is a local server, so it runs on your machine, not ours. Paste this to open it in the official MCP Inspector and poke at its tools:
npx @modelcontextprotocol/inspector npx -y owasp-mcp-scanAdd a badge to your README
[](https://socketcat.com/servers/io.github.CodingSelim/mcp-scan)Shows your live quality grade and links back here. It updates itself as the grade changes.