# scanner MCP server

> Scans MCP servers, source trees, and packages for security vulnerabilities, protocol conformance, and coverage gaps.

- Repository: https://github.com/devlab-group/mcp-scanner
- Page: https://hostedmcp.org/servers/devlab-group/mcp-scanner
- Official: yes
- Transport: —
- Stars: 35
- License: Apache-2.0

## FAQ

### What languages does the source-to-sink dataflow analysis support?

The scanner supports dataflow analysis across files in Go, Python, JavaScript, TypeScript, Java, and Rust.

### Is it safe to scan live servers?

Yes, by default the scanner uses 'safe' active probes which send malformed protocol messages that a conforming server must reject without invoking arbitrary tools.