Log inSubmit server
MCPAmpel MCP Security Scanner logo

MCPAmpel MCP Security Scanner

Scans configured MCP servers and supported package URLs with 16 security engines and returns trust scores and findings.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install MCPAmpel MCP Security Scanner

Pick your client, then add it in one click or paste the config.

STDIOPython
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "mcpampel-mcp-security-scanner": {
      "command": "uvx",
      "args": [
        "mcpampel"
      ],
      "env": {
        "MCPAMPEL_API_KEY": "YOUR_VALUE_HERE",
        "MCPAMPEL_BASE_URL": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

uvx mcpampel

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 10d ago.

Overview

MCPAmpel - MCP Security Scanner MCP server checks installed MCP servers and repository or package URLs for security issues. It discovers servers from Claude Code, Cursor, Windsurf, or Gemini CLI configuration, submits them to 16 scanning engines, and returns aggregated trust scores with findings. Use it to review local MCP installations or assess a GitHub, GitLab, npm, or PyPI source before adoption. Detailed scan records can be retrieved by scan ID, and usage is limited by the account's daily quota.

Use cases

  • Scan installed MCP servers before enabling them
  • Review a GitHub, GitLab, npm, or PyPI URL
  • Inspect detailed findings from a completed scan
  • Check remaining daily scan quota

Key features

  • Discovers servers from supported editor configurations
  • Scans with 16 detection engines
  • Returns aggregated trust scores
  • Supports GitHub, GitLab, npm, and PyPI URLs
  • Provides detailed results by scan ID
  • Reports daily quota usage

Tools4

What MCPAmpel MCP Security Scanner lets your agent do. Expand a tool for its parameters.

Self-reported~113 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

11/11 checks healthy over the last 57d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 16d ago via OSV.dev · mcpampel (PyPI)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars2Stargazers on the source repository.
Last commit7mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed4Callable tools this server registers over MCP.

How MCPAmpel MCP Security Scanner works

What MCPAmpel - MCP Security Scanner MCP server does

MCPAmpel - MCP Security Scanner MCP server evaluates MCP servers for security vulnerabilities through a remote scanning service. It can inspect servers already present in supported editor configuration files or analyze one public source URL at a time. Results include an aggregated trust score and information from the individual detection engines.

The local discovery workflow is intended for reviewing the MCP servers configured for an AI development environment. The URL workflow is useful when a server has not yet been installed, but its source is available through GitHub, GitLab, npm, or PyPI.

How it works

The server runs as a local MCP process and communicates with the MCPAmpel API. When scan_my_servers is called, it reads supported editor configuration locations, identifies configured MCP servers, and sends them for analysis. The tool requires no input parameters.

scan_url sends a supplied GitHub, GitLab, npm, or PyPI URL for scanning. The response provides a trust score, an engine-by-engine breakdown, and detected findings. Both scan methods produce a scan record that can be examined further with get_scan_results using its scan ID.

The service tracks API usage against a daily allowance. check_status reports the amount used and the number of scans remaining.

Setup and configuration

Run the server with uvx mcpampel. Register an account at mcpampel.com to obtain an API key, then add the server to the MCP configuration used by your client. The documented configuration locations are:

  • Claude Code or Claude Desktop: ~/.claude/settings.json or claude_desktop_config.json
  • Cursor: ~/.cursor/mcp.json
  • Windsurf: ~/.codeium/windsurf/mcp_config.json
  • Gemini CLI: ~/.gemini/settings.json

Set MCPAMPEL_API_KEY in the server's environment. MCPAMPEL_BASE_URL is optional and defaults to https://mcpampel.com, allowing the API endpoint to be configured explicitly.

Tools and capabilities

The MCPAmpel - MCP Security Scanner MCP server exposes four tools:

  • scan_my_servers discovers configured MCP servers and scans them with 16 engines, returning a summary table and trust scores.
  • scan_url accepts one supported GitHub, GitLab, npm, or PyPI URL and returns its trust score, engine results, and findings.
  • check_status displays daily quota consumption and remaining scans.
  • get_scan_results accepts a scan_id and returns detailed results for a previous scan started with scan_my_servers or scan_url.

Limitations and notes

The included allowance is 50 API calls per day. Scanning depends on an API key and the MCPAmpel service.

The URL scanner supports GitHub, GitLab, npm, and PyPI URLs only. A detailed result lookup also requires the scan ID returned by an earlier scan. The documentation identifies the project license as Apache License 2.0.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about MCPAmpel MCP Security Scanner

MCPAmpel - MCP Security Scanner is an MCP server that connects AI clients to the MCPAmpel scanning API. Its main tools discover and scan configured MCP servers, scan GitHub, GitLab, npm, or PyPI URLs, check daily quota status, and retrieve detailed results by scan ID.

Run `uvx mcpampel`, then add it to your MCP client configuration with `MCPAMPEL_API_KEY` set. The README provides configuration examples for Claude Code, Claude Desktop, Cursor, Windsurf, and Gemini CLI.

Yes, MCPAmpel - MCP Security Scanner works with Cursor. Add its MCP configuration to `~/.cursor/mcp.json`, use `uvx` with the `mcpampel` argument, and provide your API key in the server environment.

Use the `scan_url` tool with the GitHub, GitLab, npm, or PyPI URL as its `url` parameter. The response includes a trust score, detection-engine breakdown, and findings.

Call `get_scan_results` with the scan ID returned by `scan_my_servers` or `scan_url`. It retrieves the detailed results for that scan.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMCPAmpel MCP Security Scanner AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/mcpampel-mcp-security-scanner?style=directory)](https://allmcps.com/mcp/mcpampel-mcp-security-scanner)
HTML Embed
<a href="https://allmcps.com/mcp/mcpampel-mcp-security-scanner"><img src="https://allmcps.com/api/badge/mcpampel-mcp-security-scanner?style=directory" alt="MCPAmpel MCP Security Scanner on AllMCPs" /></a>