MCP Watch 🔍

Name: MCP Watch 🔍
Author: kapilduraphe

@kapilduraphe

About MCP Watch 🔍

A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations.

#mcp #security #scanner

Config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

Repository

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is MCP Watch 🔍?

MCP Watch 🔍 is a comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP implementations. It is built for developers and security researchers who need to audit MCP servers against a range of attack vectors.

How to use MCP Watch 🔍?

Install globally with npm install -g mcp-watch or locally with npm install mcp-watch. To scan a GitHub repository, run mcp-watch scan <repository-url>. You can filter results by severity (--severity high) or category (--category credential-leak), and choose output format with --format json.

Key features of MCP Watch 🔍?

Credential Detection for hardcoded API keys and tokens
Tool Poisoning detection for hidden malicious instructions
Parameter Injection identification for sensitive data extraction
Prompt Injection scanning for manipulation

Comments

Basic information

More Other MCP servers

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.