Pricing

from $50.00 / 1,000 mcp server scanneds

Try for free

Go to Apify Store

MCP Security Scanner

Try for free

Static security analysis of Model Context Protocol (MCP) servers: risky tool capabilities, dangerous tool combinations, prompt-injection in tool metadata, credential exposure and missing auth. For AI agent builders.

Pricing

from $50.00 / 1,000 mcp server scanneds

Rating

0.0

(0)

Developer

Justin Hagerty

Actor stats

Bookmarked

Total users

Monthly active users

13 days ago

Last modified

Categories

Developer tools

You can access the MCP Security Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

# Set API token
$API_TOKEN=<YOUR_API_TOKEN>

# Prepare Actor input
$cat > input.json << 'EOF'
<{
<  "serverDefinitions": [
<    {
<      "name": "demo-notes-assistant",
<      "command": "npx",
<      "args": [
<        "-y",
<        "@example/notes-mcp"
<      ],
<      "env": {
<        "NOTES_API_TOKEN": "${NOTES_API_TOKEN}"
<      },
<      "tools": [
<        {
<          "name": "read_note",
<          "description": "Read a private note from the user's notebook by its id.",
<          "inputSchema": {
<            "type": "object",
<            "properties": {
<              "id": {
<                "type": "string"
<              }
<            },
<            "required": [
<              "id"
<            ],
<            "additionalProperties": false
<          },
<          "annotations": {
<            "readOnlyHint": true
<          }
<        },
<        {
<          "name": "fetch_url",
<          "description": "Fetch any web page and return its text so it can be summarised.",
<          "inputSchema": {
<            "type": "object",
<            "properties": {
<              "url": {
<                "type": "string"
<              }
<            },
<            "required": [
<              "url"
<            ]
<          }
<        },
<        {
<          "name": "delete_note",
<          "description": "Delete a note by its id.",
<          "inputSchema": {
<            "type": "object",
<            "properties": {
<              "id": {
<                "type": "string"
<              }
<            },
<            "required": [
<              "id"
<            ]
<          }
<        }
<      ]
<    }
<  ]
<}
<EOF

# Run the Actor using an HTTP API
# See the full API reference at https://docs.apify.com/api/v2
$curl "https://api.apify.com/v2/actors/michiganpublictech~mcp-security-scanner/runs?token=$API_TOKEN" \
<  -X POST \
<  -d @input.json \
<  -H 'Content-Type: application/json'

MCP Security Scanner — audit Model Context Protocol servers API

Below, you can find a list of relevant HTTP API endpoints for calling the MCP Security Scanner Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/michiganpublictech~mcp-security-scanner/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/michiganpublictech~mcp-security-scanner/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/michiganpublictech~mcp-security-scanner?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the MCP Security Scanner API programmatically via the Apify API.

You can choose from:

MCP Security Scanner API in Python

MCP Security Scanner API in JavaScript

MCP Security Scanner API through CLI

MCP Security Scanner OpenAPI definition

You can start MCP Security Scanner with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The MCP Security Scanner is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the MCP Security Scanner run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

Business Entity Intelligence MCP Server

martc03/business-entity-mcp

MCP server for business entity research. Gives AI assistants access to OpenCorporates company data and SEC EDGAR company filings for due diligence.

CoDee

Oura MCP Server

unlimiteddots/oura-mcp-server

Oura MCP Server exposes your Oura Ring API v2 data through Model Context Protocol (MCP), so AI assistants can query sleep, activity, stress, heart rate, workouts, readiness, and more. What You Get - 15+ MCP tools covering sleep, recovery, activity, vitals, and device/profile data.

Unlimited Dots

Playwright MCP Server

jiri.spilka/playwright-mcp-server

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright

Jiří Spilka

459

Example MCP Server

apify/example-mcp-server

This is an example MCP Server Actor written in Typescript. It doesn't do much; it just reads two numbers from its input, sums them, and pushes the result to the Actor's default dataset.

Apify

5.0

(1)

Ai Translation Context

vivid_astronaut/ai-translation-context

BRAINIALL Team

Court Records & Legal Research MCP Server

martc03/court-records-mcp

MCP server for federal court data. Gives AI assistants access to court opinions, case dockets, and judge information from the CourtListener/RECAP database.

CoDee

Real Estate MCP Server Multi-Platform Property Data for AI

alizarin_refrigerator-owner/real-estate-mcp-server

MCP Server providing AI assistants with unified access to 4+ real estate platforms through a single interface. Search properties, analyze market trends, compare listings, and generate investment reports across Zillow, Redfin, Realtor.com, and MLS.

The Howlers

Slack MCP Server

constant_quadruped/slack-mcp-server

MCP server for Slack workspaces. Read channel history, search messages, fetch thread replies, list users and channels, and post messages. Supports OAuth, Bot, and browser token authentication. Based on korotovsky/slack-mcp-server with 600+ GitHub stars.

Airbnb MCP Server — Claude, Cursor & AI Agents

makework36/airbnb-mcp-server

Plug-and-play Airbnb MCP server for Claude Desktop, Cursor and any MCP-compatible AI agent. Search listings, compare prices across cities, pull ratings, photos and coordinates — no login, no API key.

deusex machine

Competitive Intelligence MCP Server

martc03/competitive-intel-mcp

MCP server for competitive analysis. Gives AI assistants a unified view of any company by combining SEC filings, news articles, and federal contract awards.

CoDee