Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.
Connect Runs on your machine
claude mcp add mcp-guard-scan -e MCP_GUARD_ALLOW_STDIO=<MCP_GUARD_ALLOW_STDIO> -e MCP_GUARD_ALLOW_PRIVATE_NETWORK=<MCP_GUARD_ALLOW_PRIVATE_NETWORK> -e LOG_LEVEL=<LOG_LEVEL> -- npx -y [email protected]
{
"mcpServers": {
"mcp-guard-scan": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"MCP_GUARD_ALLOW_STDIO": "<MCP_GUARD_ALLOW_STDIO>",
"MCP_GUARD_ALLOW_PRIVATE_NETWORK": "<MCP_GUARD_ALLOW_PRIVATE_NETWORK>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}
{
"mcpServers": {
"mcp-guard-scan": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"MCP_GUARD_ALLOW_STDIO": "<MCP_GUARD_ALLOW_STDIO>",
"MCP_GUARD_ALLOW_PRIVATE_NETWORK": "<MCP_GUARD_ALLOW_PRIVATE_NETWORK>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}
{
"servers": {
"mcp-guard-scan": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"MCP_GUARD_ALLOW_STDIO": "<MCP_GUARD_ALLOW_STDIO>",
"MCP_GUARD_ALLOW_PRIVATE_NETWORK": "<MCP_GUARD_ALLOW_PRIVATE_NETWORK>",
"LOG_LEVEL": "<LOG_LEVEL>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
MCP_GUARD_ALLOW_STDIOOptional | Set to 1 to add scan_stdio_server, which starts the command it is given |
MCP_GUARD_ALLOW_PRIVATE_NETWORKOptional | Set to 1 to let scan_server reach local and private addresses, over http too |
LOG_LEVELOptional | pino log level; logs go to stderr |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 4 Nov 2026 |
| Last updated | 4 Nov 2026 |
| Registry name | io.github.diegoperezg7/mcp-guard-scan |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
