mcp-scan for VS Code
io.github.codingselim/mcp-scan
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
client:VS Code
transport:stdio
runtime:npm
Install mcp-scan in VS Code
.vscode/mcp.json
{
"servers": {
"mcp-scan": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"owasp-mcp-scan"
]
}
}
}Requires agent mode. MCP: Open User Configuration puts the same block in every workspace. VS Code docs