/ Directorio / Playground / Cisco MCP Scanner
← Todos los servidores ↗ GitHub
● Oficial cisco-ai-defense ⚡ Instantáneo

Cisco MCP Scanner

por cisco-ai-defense · cisco-ai-defense/mcp-scanner

Run a battery of prompt-injection, tool-shadowing, and exfiltration tests against any MCP server before you trust it in production.

Cisco's scanner enumerates an MCP server's tools, descriptions, and prompts, then probes them with known attack templates: indirect injection in returned data, tool-name shadowing, suspicious schema fields, exfil-via-error, and more. You get a Markdown/JSON report you can attach to a PR.

▶ Ver demo 📦 Instalar 💡 Casos de uso

Por qué usarlo

Características clave

Demo en vivo

Cómo se ve en la práctica

listo

Instalar

Elige tu cliente

~/Library/Application Support/Claude/claude_desktop_config.json  · Windows: %APPDATA%\Claude\claude_desktop_config.json
{
  "mcpServers": {
    "cisco-mcp-scanner": {
      "command": "uvx",
      "args": [
        "mcp-scanner",
        "--server",
        "stdio:npx -y <target>"
      ],
      "_doc": "Run against any MCP server config; produces a security report."
    }
  }
}

Abre Claude Desktop → Settings → Developer → Edit Config. Reinicia después de guardar.

~/.cursor/mcp.json · .cursor/mcp.json
{
  "mcpServers": {
    "cisco-mcp-scanner": {
      "command": "uvx",
      "args": [
        "mcp-scanner",
        "--server",
        "stdio:npx -y <target>"
      ],
      "_doc": "Run against any MCP server config; produces a security report."
    }
  }
}

Cursor usa el mismo esquema mcpServers que Claude Desktop. La configuración del proyecto prevalece sobre la global.

VS Code → Cline → MCP Servers → Edit
{
  "mcpServers": {
    "cisco-mcp-scanner": {
      "command": "uvx",
      "args": [
        "mcp-scanner",
        "--server",
        "stdio:npx -y <target>"
      ],
      "_doc": "Run against any MCP server config; produces a security report."
    }
  }
}

Haz clic en el icono MCP Servers de la barra lateral de Cline y luego en "Edit Configuration".

~/.codeium/windsurf/mcp_config.json
{
  "mcpServers": {
    "cisco-mcp-scanner": {
      "command": "uvx",
      "args": [
        "mcp-scanner",
        "--server",
        "stdio:npx -y <target>"
      ],
      "_doc": "Run against any MCP server config; produces a security report."
    }
  }
}

Mismo formato que Claude Desktop. Reinicia Windsurf para aplicar.

~/.continue/config.json
{
  "mcpServers": [
    {
      "name": "cisco-mcp-scanner",
      "command": "uvx",
      "args": [
        "mcp-scanner",
        "--server",
        "stdio:npx -y <target>"
      ]
    }
  ]
}

Continue usa un array de objetos de servidor en lugar de un mapa.

~/.config/zed/settings.json
{
  "context_servers": {
    "cisco-mcp-scanner": {
      "command": {
        "path": "uvx",
        "args": [
          "mcp-scanner",
          "--server",
          "stdio:npx -y <target>"
        ]
      }
    }
  }
}

Añádelo a context_servers. Zed recarga en caliente al guardar.

claude mcp add cisco-mcp-scanner -- uvx mcp-scanner --server 'stdio:npx -y <target>'

Un solo comando. Verifica con claude mcp list. Quita con claude mcp remove.

Casos de uso

Usos del mundo real: Cisco MCP Scanner

Audit a third-party MCP before adopting it

👤 Developers ⏱ ~15 min intermediate

Cuándo usarlo: A teammate wants to install a community MCP and you want a security signal first.

Flujo
  1. Install scanner
    uvx mcp-scanner --help✓ Copiado
    → Scanner runs
  2. Scan
    mcp-scanner --server "stdio:npx -y the-mcp" --output report.md✓ Copiado
    → Report written
  3. Review
    Open report.md; triage findings by severity.✓ Copiado
    → Adoption decision documented

Resultado: Documented security review before merging the MCP into your config.

Gate MCP changes in CI

👤 Developers ⏱ ~15 min intermediate

Cuándo usarlo: You ship an internal MCP and want a baseline check on every PR.

Flujo
  1. Add CI step
    Run mcp-scanner against the built server; fail on HIGH findings.✓ Copiado
    → PR fails on regressions
  2. Fix or accept
    Each finding gets fixed or annotated with a risk acceptance.✓ Copiado
    → Clean baseline

Resultado: No new prompt-injection surface ships unreviewed.

Combinaciones

Combínalo con otros MCPs para multiplicar por 10

cisco-mcp-scanner + github

Run on every PR via Actions; comment findings on the PR

Combine cisco-mcp-scanner with github: Run on every PR via Actions; comment findings on the PR✓ Copiado
cisco-mcp-scanner + sentry

Pipe scanner findings as Sentry alerts on main branch

Combine cisco-mcp-scanner with sentry: Pipe scanner findings as Sentry alerts on main branch✓ Copiado

Herramientas

Lo que expone este MCP

HerramientaEntradasCuándo llamarCoste
scanner CLI (see docs) Not exposed as MCP tools — this is a scanner, not a server 1 call

Coste y límites

Lo que cuesta ejecutarlo

Cuota de API
N/A
Tokens por llamada
Local — uses the target MCP only
Monetario
Free OSS
Consejo
Run scans in a sandboxed network so probes can't exfil real data

Seguridad

Permisos, secretos, alcance

Almacenamiento de credenciales: No credentials by itself
Salida de datos: Whatever the target MCP egresses
No conceder nunca: point at a production MCP with real credentials — use a staging instance

Resolución de problemas

Errores comunes y soluciones

Scanner times out on a slow MCP

Increase --timeout; check the server actually starts under stdio

False positives on benign tools

Use --baseline to mark them; future runs ignore

Alternativas

Cisco MCP Scanner vs otros

AlternativaCuándo usarlaContrapartida
Manual reviewSingle-author trusted MCPMisses subtle injection patterns

Más

Recursos

📖 Lee el README oficial en GitHub

🐙 Ver issues abiertas

🔍 Ver todos los 400+ servidores MCP y Skills