acrf-mcp-scan

# acrf-mcp-scan MCP server inventory and risk scanner. Implements the ACRF-03 (MCP Server Sprawl) defense pattern. Part of the ACRF framework: https://github.com/kannasekar-alt/ACRF PyPI: https://pypi.org/project/acrf-mcp-scan/ Presented at RSA Conference 2026. --- ## Try it in your environment right now No Docker. No setup. Just Python 3.10+. **Step 1 - Install:** pip install acrf-mcp-scan **Step 2 - Scan your MCP config file:** from acrf_mcp_scan import MCPScanner scanner = MCPScanner() inventory = scanner.scan_config_file("mcp_config.json") for server in inventory.suspicious_servers(): print(f"WARNING {server.name}: {server.risk_summary()}") **Step 3 - Scan a directory of MCP servers:** inventory = scanner.scan_directory("/opt/mcp-servers") **Step 4 - Compare against your approved inventory:** from acrf_mcp_scan import MCPServerInventory trusted = MCPServerInventory.load("approved_mcp.json") diff = inventory.diff(trusted) for unauthorized in diff.added: print(f"UNAUTHORIZED: {unauthorized.name}") for missing in diff.removed: print(f"MISSING APPROVED: {missing.name}") If anything is unauthorized or anything has changed in command/args/version, your application can fail closed and refuse to start. --- ## The problem this solves MCP server registries make it trivial to install third-party agent capabilities. That trivial install is also an unbounded attack surface. Antiy CERT 2025 documented over 1,000 malicious MCP servers in public registries, including postmark-mcp which silently exfiltrated email content for months before being noticed. This is ACRF-03: MCP server sprawl. acrf-mcp-scan inventories every MCP server in your environment, flags suspicious ones with a configurable rule set, and lets you compare your running inventory against an approved baseline. --- ## What gets flagged The scanner checks each MCP server for: **Configuration risks** - Missing publisher me…