Precision-first security scanning for Model Context Protocol servers.
Connect Runs on your machine
claude mcp add mcpsentinel -e MCPSENTINEL_ALLOWED_HOSTS=<MCPSENTINEL_ALLOWED_HOSTS> -e MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS=<MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS> -- uvx mcp-guardian-scan==0.8.8
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan==0.8.8"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>",
"MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
}
}
}
}
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan==0.8.8"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>",
"MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
}
}
}
}
{
"servers": {
"mcpsentinel": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-guardian-scan==0.8.8"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>",
"MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
MCPSENTINEL_ALLOWED_HOSTSRequired | Comma-separated MCP server hostnames, optionally with an exact port, that the MCP-native scanner may connect to. |
MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETSOptional | Set to true only to permit an explicitly allowlisted private or reserved HTTP address in a trusted local network. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 21 Sep 2026 |
| Last updated | 21 Sep 2026 |
| Registry name | io.github.gentaArnezzi/mcpsentinel |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
