MCPAmpel - MCP Security Scanner

Name: MCPAmpel - MCP Security Scanner
Author: diemoeve

@diemoeveMCP server · External

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

Penetration testingv0.2.2Apache-2.0Python

Freeno charge per call

How to install

Runs on your machine from its package; the steps are below.

What it does

Reads
Writes
High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Runs locally over stdio

This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).

PyPImcpampelv0.2.2

Run

uvx mcpampel

MCP client config

{
  "mcpServers": {
    "mcpampel-mcp-security-scanner": {
      "command": "uvx",
      "args": [
        "mcpampel"
      ]
    }
  }
}

README2 min readView on GitHub

Scan your installed MCP servers for security vulnerabilities, directly from your AI agent.

MCPAmpel discovers MCP servers from your Claude Code, Cursor, Windsurf, or Gemini CLI configuration, submits them to 16 scanning engines, and returns an aggregated trust score with detailed findings.

50 API calls/day included.

Quick Start

bash

uvx mcpampel

Configuration

Claude Code / Claude Desktop

Add to ~/.claude/settings.json or claude_desktop_config.json:

json

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json:

json

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

json

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}

Gemini CLI

Add to ~/.gemini/settings.json:

json

{
  "mcpServers": {
    "mcpampel": {
      "command": "uvx",
      "args": ["mcpampel"],
      "env": {
        "MCPAMPEL_API_KEY": "your_key_here"
      }
    }
  }
}

Getting an API Key

Environment Variables

Variable	Required	Default	Description
`MCPAMPEL_API_KEY`	Yes	-	Your API key (free at mcpampel.com)
`MCPAMPEL_BASE_URL`	No	`https://mcpampel.com`	API base URL

Tools

`scan_my_servers`

Discovers all MCP servers from your editor config and scans them with 16 engines. Returns a summary table with trust scores. No input needed.

`scan_url`

Scan a single GitHub, GitLab, npm, or PyPI URL. Returns trust score, engine breakdown, and findings.

Parameter	Type	Required
`url`	string	Yes

`check_status`

Show your daily quota usage and remaining scans.

`get_scan_results`

Get detailed results for a specific scan by ID. Use after scan_my_servers or scan_url to drill into findings.

Parameter	Type	Required
`scan_id`	string	Yes

Development

bash

cd mcp-plugin
uv sync
uv run pytest

License

Apache License 2.0

mcpampel.com

Similar modules

Browse Penetration testing