55-tool MCP server for security scanning of MCP servers. Runtime inspection, AST-based SAST, config audit, dependency analysis, OWASP MCP Top 10 compliance. OAuth, TLS, fuzz testing, prompt injection, tool mutation detection. 100% local, zero external API calls.
Latest release v1.1.1 — v1.1.1 — 55 Security Checks · 25 Jun 2026
1 file for Claude Code: mcp-security-scanner CLAUDE.md — 442 tokens loaded in every session.
CLAUDE.md A 442 tok These files are badchars/mcp-security-scanner's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.