Serveur MCP
SecurityScan
net.apisecurityscan/securityscan
Ce que fait ce MCP
Audits MCP configurations, scans agent skills and networks, checks dependencies, and detects secrets or personal data in payloads.
Capacités
Outils
8
outils
audit_mcp_server_config
Audit an MCP client configuration for security risks â works offline,
no external service required. Detects: tool poisoning, hidden/coercive
instructions in tool descriptions, hardcoded credentials, unpinned
packages (rug-pull risk), insecure transport, and toxic capability
combinations (shell + network, file-read + network).
Schéma d’entrée
{'type': 'object', 'required': ['config_json'], 'properties': {'config_json': {'type': 'string', 'description': 'The FULL JSON content of the MCP config file as a string\n (e.g. claude_desktop_config.json or .mcp.json). Paste the\n file content, not the path.'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
check_dependencies
Check the health of your agent's external dependencies: uptime, SSL
validity, blacklist status, and a trust score 0-100 (DepScan).
Schéma d’entrée
{'type': 'object', 'required': ['endpoints'], 'properties': {'endpoints': {'type': 'array', 'items': {'type': 'string'}, 'description': 'List of URLs your agent/skill depends on,\n e.g. ["https://api.openai.com", "https://api.stripe.com"]'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
full_stack_audit
Complete security posture in one call: audits the MCP config, checks
dependency health, analyzes an untrusted skill, scans the local network
gateway, and scans any payload you're about to send out for secrets/PII â
then correlates everything into a single prioritized report. Pass only
what you have; each section is skipped gracefully if its input or service
is missing.
Schéma d’entrée
{'type': 'object', 'properties': {'skill_url': {'type': 'string', 'default': '', 'description': 'untrusted skill to vet (optional)'}, 'text_to_scan': {'type': 'string', 'default': '', 'description': 'payload to vet for secret/PII egress (optional)'}, 'network_target': {'type': 'string', 'default': '', 'description': 'IP to scan, e.g. "192.168.1.1" (optional)'}, 'mcp_config_json': {'type': 'string', 'default': '', 'description': 'MCP config content as string (optional)'}, 'network_authorized': {'type': 'boolean', 'default': False, 'description': 'REQUIRED to scan network_target. Set True to certify\n you own or have permission to scan it. (optional, default False)'}, 'dependency_endpoints': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'default': None, 'description': 'URLs your stack depends on (optional)'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
network_scan
Active security scan of a device or host with an autonomous AI agent that
decides which follow-up probes to run (ActiveScanner). Only scan targets
you own or have permission to test.
Schéma d’entrée
{'type': 'object', 'required': ['target', 'authorized'], 'properties': {'target': {'type': 'string', 'description': 'IP, CIDR, or hostname. Examples: "192.168.1.1", "10.0.0.0/24"'}, 'scan_type': {'type': 'string', 'default': 'quick', 'description': '"quick" (~30s, top ports) [default], "standard" (~2min,\n agent loop), "deep" (~10min, full ports + credentials check)'}, 'authorized': {'type': 'boolean', 'description': 'REQUIRED. You must set this to True to certify that you own\n the target or have explicit permission to test it. Setting it\n to False (or omitting it) aborts the scan. Scanning without\n authorization may be illegal (CFAA / Computer Misuse Act).'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
scan_secrets
Scan a text payload (a prompt, an outbound API body, a file's contents)
for secrets and PII BEFORE it leaves for an LLM or external API, and
return a redacted copy. Catches the #1 real-world agent incident:
secrets/PII leaking into a model's context.
WORKS OFFLINE with no API key â the detection runs in-process (pure regex
+ Luhn check, no network). If a SecretScan backend key IS configured, the
scan is routed there instead (which also persists an audit record).
Schéma d’entrée
{'type': 'object', 'required': ['text'], 'properties': {'text': {'type': 'string', 'description': 'The payload to inspect (prompt, request body, document text).'}, 'redact': {'type': 'boolean', 'default': True, 'description': 'If True (default), each match is replaced with a token like\n [REDACTED-KEY] / [REDACTED-EMAIL]. If False, only reports.'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
scan_skill
Analyze an AI agent skill for prompt injection, malware patterns, and
OWASP LLM Top 10 issues BEFORE installing it (SecurityScan).
Schéma d’entrée
{'type': 'object', 'required': ['skill_url'], 'properties': {'skill_url': {'type': 'string', 'description': 'URL of the skill to analyze (e.g. a GitHub skill URL).'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
securityscan_checkout
Start a Stripe checkout to buy a SecurityScan tier (agent-native sales).
Returns a payment URL to hand to your user AND a PENDING API key that
activates automatically once payment clears â no other setup step.
Schéma d’entrée
{'type': 'object', 'required': ['tier'], 'properties': {'tier': {'type': 'string', 'description': 'one of "founder" ($29 one-time), "personal", "executive",\n "enterprise" (monthly)'}, 'email': {'type': 'string', 'default': '', 'description': 'optional â\x80\x94 prefills the Stripe checkout page for your user'}, 'existing_key': {'type': 'string', 'default': '', 'description': 'optional â\x80\x94 upgrade an existing ask_live_ key instead of\n minting a new one'}}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
securityscan_pricing
SecurityScan catalog: tiers, prices, quotas and the evidence behind the
product â the fact sheet an agent needs to evaluate or recommend a purchase
to its user. Fully offline, no API key required.
Returns:
JSON with the tier table (price / target slots / scan types), the
pricing model, benchmark evidence, and how to buy.
Schéma d’entrée
{'type': 'object', 'properties': {}, 'additionalProperties': False}
Schéma de sortie
{'type': 'object', 'required': ['result'], 'properties': {'result': {'type': 'string'}}, 'x-fastmcp-wrap-result': True}
Historique
Modifications récentes des outils
Ajouté
securityscan_checkout
17 September 2026 12:54
Ajouté
securityscan_pricing
17 September 2026 12:54
Ajouté
full_stack_audit
17 September 2026 12:54
Ajouté
scan_secrets
17 September 2026 12:54
Ajouté
audit_mcp_server_config
17 September 2026 12:54
Ajouté
network_scan
17 September 2026 12:54
Ajouté
check_dependencies
17 September 2026 12:54
Ajouté
scan_skill
17 September 2026 12:54
Découvrir
Serveurs MCP similaires
osint-terminal
com.thetempleofdoom.osint-mcp/osint-terminal
Provides keyless OSINT and reconnaissance tools for domains, DNS, IPs, breach exposure, threat intelligence, and related lookups.
AIMEAT
io.aimeat/aimeat
Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…
hyperion
com.thetempleofdoom.hyperion/hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
Vee3
io.github.Vee3io/vee3
Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…
BorealHost
ai.borealhost/mcp
Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…
Proof Holdings
holdings.proof/mcp-server
Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlle…
GoCreative Agent API
io.github.ColinHughes2121/gocreative-agent-api
Offers pay-per-call LLM completions and data services for company intelligence, KYB, sanctions screening, threat intelligence, co…
Japan Public Ledgers MCP
com.mcp-revenue-empire/japan-public-ledgers
Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…