mcp-scan for Claude Code

io.github.codingselim/mcp-scan

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

client:Claude Code transport:stdio runtime:npm

Install mcp-scan in Claude Code

run in your project directory

claude mcp add mcp-scan -- npx -y owasp-mcp-scan

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs