# Changelog of MCP Security Scanner (`michiganpublictech/mcp-security-scanner`) Actor

- **URL**: https://apify.com/michiganpublictech/mcp-security-scanner/changelog.md
- **Full Actor documentation**: https://apify.com/michiganpublictech/mcp-security-scanner.md

## Changelog — MCP Security Scanner

### 0.1.0 — unreleased

Initial release: static security analysis of MCP server metadata.

- **Inputs:** `tools/list` results (including JSON-RPC envelopes and bare tool arrays); client configs
  (Claude Desktop / Cursor / Windsurf `mcpServers`, VS Code `servers` / `mcp.servers`, Zed `context_servers`);
  MCP registry `server.json` manifests (packages and remotes, including the registry API envelope); single
  server objects; definition URLs.
- **Optional remote discovery** (`remoteDiscovery` + `confirmAuthorization`): metadata-only Streamable HTTP
  client (`initialize`, `notifications/initialized`, paginated `tools/list`, `prompts/list`, `resources/list`)
  with JSON and SSE responses, `Mcp-Session-Id` sessions, page/size caps and an optional `remoteAuthHeader`.
  `tools/call` is never sent.
- **Capability classification** into 14 tags (filesystem, shell/code execution, network egress, databases,
  credentials, payments, messaging, browser automation, untrusted content, private data, destructive).
- **62 rules** across 13 families: dangerous combinations (lethal trifecta, execution + egress,
  filesystem + egress, credentials + egress), capabilities, tool poisoning / hidden instructions, tool
  shadowing, destructive operations and annotations, input schemas (command/SQL, path traversal, SSRF),
  descriptions, credential exposure (redacted), authentication/transport, supply chain, rug-pull baselines,
  excessive agency and resources.
- **Cross-server `combined-toolset` report** (free) when two or more servers are scanned together.
- **Rug-pull detection:** per-tool SHA-256 definition hashes (`data.tool_hashes`, `data.tool_hash_details`)
  and `baselineHashes` diffing.
- Dataset views: Overview, Findings, Tools & capabilities. `REPORT.md`, `REPORT.sarif`, CI gate
  (`failOnSeverity`).
- Pricing: `server-scanned` $0.05 (primary), `remote-discovery` $0.01 (only when discovery succeeds).