scan_mcp_url
Fetch a remote MCP server's /tools/list (or any JSON tool listing) and scan every tool's name + description + inputSchema against the canonical 30+ injection-pattern rules.
LABSCO SUMMARY
Severity tiers are what make a rule set usable.
Thirty rules that all shout equally loudly produce a report nobody reads; sorting them into five tiers is the difference between a scanner and a noise source. The repository documents the rule set and the threat class it targets. Its five tools scan another MCP server's tool list (from the server's address, or pasted in), list the rules, issue a signed safety report on paid plans and show pricing.
What it is
A Python server that scans for MCP injection. It ships 30+ canonical detection rules sorted into 5 severity tiers, aimed at the MCP remote-code-execution class described in April 2026 — so findings arrive ranked rather than as a flat list you have to triage.
What you get
Rule-based scanning with severity already attached: 30+ canonical rules across 5 tiers, so a high-severity hit is distinguishable from a stylistic one without reading every result.
Requirements
pip install meok_mcp_injection_scan_mcp, or add the PyPI package meok-mcp-injection-scan-mcp to your client over stdio. MIT-licensed.
Setup effort
One command — pip install meok_mcp_injection_scan_mcp
USE CASES
01
Checking content before it reaches a model
Scan it for known injection patterns and triage by severity tier.
02
Auditing an MCP setup against a known threat class
Run the canonical rule set rather than assembling your own regexes.
5 tools
Listed in project code.
audit_tool_descriptions
Audit a JSON string containing a tool list (paste from your own MCP server's tools/list output).
signed_safety_report
Issue a cryptographically signed safety report for the scanned MCP server. Pro / Enterprise tier only.
list_rules
List every detection rule in the canonical catalogue.
pricing
Pricing + subscribe links for this MCP.
BEFORE YOU INSTALL
What to know first
Tools you get
5 tools registered in the project's code.
Requires
uvx on PATH
INSTALLATION
Connect your client
Add the block to your client, or run the command directly.
Server setup
Configuration file
JSON
{
"mcpServers": {
"meok-mcp-injection-scan-mcp": {
"command": "uvx",
"args": [
"meok-mcp-injection-scan-mcp"
]
}
}
}pip
TERMINAL
pip install meok_mcp_injection_scan_mcp
