MCP server: One MCP server.

Mcpcheckup

@fpetititMCP server · External

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Penetration testingv0.1.0MITTypeScript
Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

What it does

  1. Reads
  2. Writes
  3. High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

None listed · checked 26 Sep 2026

Odel could not list its tools without signing in.

Try it in the Inspector
README1 min read

mcpcheck

A webcheck.xyz-style scanner for remote MCP servers.

Enter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:

  • Connectivity & Handshake — protocol negotiation, server info, advertised capabilities.
  • Tools, Resources & Prompts — full inventory with schemas.
  • Security Heuristics — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.
  • Network & TLS — certificate validity, HTTP security headers, CORS policy.
  • License Information — presence of a LICENSE file or license mention in server instructions.

Development

bash
npm install
npm run dev

Open http://localhost:3000 and paste an MCP server URL to scan.

Notes

  • Only http:// and https:// targets are accepted; scanning private/internal IP ranges or localhost is blocked to prevent SSRF.
  • Security checks are heuristic, not a substitute for a manual security review.

Similar modules

Browse Penetration testing