by cisco-ai-defense · MCP Server · ★ 1.1k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
uv tool install --python 3.13 cisco-ai-mcp-scanner
uv tool install --python 3.13 --from git+https://github.com/cisco-ai-defense/mcp-scanner cisco-ai-mcp-scannerTaken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 1,110 |
| Forks | 158 |
| Language | Python |
| Category | MCP Server |
| License | Apache-2.0 |
| Quality Score | 78/100 |
| Open Issues | 73 |
| Last Updated | 2026-11-06 |
| Created | 2025-09-24 |
| Platforms | mcp, python |
| Est. Tokens | ~19k |
MCP Scanner A Python tool for scanning MCP (Model Context Protocol) servers and tools for potential security findings. The MCP Scanner combines Cisco AI Defense inspect API, YARA rules and LLM-as-a-judge to detect malicious MCP tools. Overview The MCP Scanner provides a comprehensive solution for scanning MCP servers and tools for security findings.
Looking for a mcp-scanner alternative? If you're comparing mcp-scanner with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
ACI.dev is the open source tool-calling platform that hooks up 600+ tools into any agentic IDE or custom AI ag
An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified e
Token conscious database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite.
Security scanner for AI agents, MCP servers and agent skills.
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Desktop AI Assistant powered by GPT-6, GPT-5, Gemini, Claude, Grok, Ollama, DeepSeek, Perplexity, and more - c
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: