MCP Server Scanner

What is MCP Server Scanner?

MCP Server Scanner detects MCP Servers running over Server-Sent Events (SSE) and enumerates their available tools. It is a quick prototype intended for testing hypotheses about internet-exposed MCP servers and their security measures.

How to use MCP Server Scanner?

Run the executable with the -url flag specifying the base HTTP URL, and optionally the -timeout flag in seconds. Example: ./mcp-scanner -url http://example.com -timeout 5.

Key features of MCP Server Scanner

• Detects MCP servers communicating via SSE.
• Enumerates available tools and their input schemas.
• Identifies internet-exposed MCP endpoints.
• Helps assess if proper security measures are implemented.
• Quick prototype for rapid feedback (not production-ready).

Use cases of MCP Server Scanner

• Discovering MCP servers publicly accessible on the internet.
• Auditing MCP deployments for potential authorization gaps.
• Researching the exposure and security posture of MCP implementations