mcp-guard MCP Server
Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.
mcp-guard scores 55 (Fair), with no SPDX license recorded. It installs as a local process. It does not declare tools yet. Filed under Uncategorized. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.
Fair trust
55 of 100 from six public signals. Nobody can buy a point.
- Listed in the official MCP registry.
- No license recorded.
License, quality and maintenance
Where the 55 comes from
22 + 20 + 0 + 0 + 10 + 3 = 55. Each factor is capped, so no single signal can carry a listing.
Active in the official MCP registry, plus a known vendor namespace.
Registry: 22 of 30 points.How recently the repository saw a commit or release.
Maintenance: 20 of 20 points.GitHub stars and weekly downloads, on a log scale.
Popularity: 0 of 20 points.A clear, OSI-style open-source license.
License: 0 of 10 points.Not archived, a secure install path, a pinned version.
Security: 10 of 10 points.A real summary, a README with depth, listed tools.
Docs: 3 of 10 points.Install
Pick your client, copy the config, paste it in.
Needs Cursor or VS Code installed on this device. The button opens the app and asks you to confirm before it adds the server.
{ "mcpServers": { "diegoperezg7-mcp-guard-scan": { "command": "npx", "args": [ "-y", "mcp-guard-scan@1.1.1" ], "env": { "MCP_GUARD_ALLOW_STDIO": "", "MCP_GUARD_ALLOW_PRIVATE_NETWORK": "", "LOG_LEVEL": "warn" } } }}
Environment variables
| Name | Required | Notes |
|---|---|---|
MCP_GUARD_ALLOW_STDIO | Optional | Set to 1 to add scan_stdio_server, which starts the command it is given |
MCP_GUARD_ALLOW_PRIVATE_NETWORK | Optional | Set to 1 to let scan_server reach local and private addresses, over http too |
LOG_LEVEL | Optional | pino log level; logs go to stderr |
Tools
All capabilitiesTools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.
About
Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.
Frequently asked questions
What is mcp-guard MCP Server?
Security scanner for MCP servers: tool poisoning, shadowing, permissions, secrets, transport.
How do I install mcp-guard MCP Server in Claude Desktop, Cursor, or VS Code?
Pick your client in the Install section on this page and copy the generated config into the client's config file. Step-by-step guides: Claude Desktop, Cursor, and VS Code. mcp-guard MCP Server runs locally from the npm package mcp-guard-scan with the command npx -y mcp-guard-scan@1.1.1.
Does mcp-guard MCP Server support remote (HTTP) connections?
No remote endpoint is listed for mcp-guard MCP Server. It runs locally on your machine over stdio, started by your MCP client.
How is mcp-guard MCP Server's trust score calculated?
mcp-guard MCP Server scores 55 out of 100 (Fair). The score adds six capped public signals: registry status, maintenance, popularity, license, documentation, and security. Nobody can pay for points. Read the methodology for the full formula.
Reviews
No reviews yet—Be the first to review
No published reviews yet. Used it? Tell the next person how it went.
Sign inA verified email is required to review this server.
Add badge to your README
Paste either snippet into the repository README. The image links to this listing.
