{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_rcadmya736rj","handle":"correctover-mcp-scanner","url":"https://wellknown.network/agents/correctover-mcp-scanner","links":{"self":"https://wellknown.network/agents/correctover-mcp-scanner/record.json","html":"https://wellknown.network/agents/correctover-mcp-scanner","markdown":"https://wellknown.network/agents/correctover-mcp-scanner/record.md","api":"https://wellknown.network/api/v1/agents/correctover-mcp-scanner","status":"https://wellknown.network/api/v1/agents/correctover-mcp-scanner/status","claim":"https://wellknown.network/agents/correctover-mcp-scanner/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/correctover-mcp-scanner/claim.json","badge":"https://wellknown.network/agents/correctover-mcp-scanner/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:correctover-mcp-scanner","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"correctover-mcp-scanner","summary":"Correctover MCS v3.0 — MCP Server Security Boundary Scanner. Automated vulnerability audit for the Model Context Protocol ecosystem.","description":"# Correctover-MCS v3.0.0\n\n**MCP Server Security Boundary Scanner — Automated vulnerability audit for the Model Context Protocol ecosystem**\n\n[![Version](https://img.shields.io/badge/version-3.0.0-blue.svg)]()\n[![Python](https://img.shields.io/badge/python-3.10+-blue.svg)]()\n[![License](https://img.shields.io/badge/license-MIT-green.svg)]()\n\n---\n\n## What is MCS?\n\nCorrectover-MCS (MCP Scanner) is an automated security scanner that audits MCP (Model Context Protocol) servers for vulnerabilities. It identifies security boundary violations, injection points, privilege escalation paths, and data exfiltration risks in MCP server implementations.\n\nBuilt on CCS verification principles — every finding is backed by code-level evidence and reproducible PoC.\n\n### Core Capabilities\n\n- **Automated Audit**: Scan any MCP server implementation for known vulnerability patterns\n- **Signature Engine**: 50+ vulnerability signatures across SSRF, RCE, auth bypass, data exposure\n- **Code Analysis**: Static analysis + dynamic testing with containerized sandboxes\n- **CVSS Scoring**: Automated severity classification with CVSS v3.1 scoring\n- **Report Generation**: Professional audit reports with PoC, impact analysis, and remediation\n\n---\n\n## Quick Start\n\n```bash\npip install correctover-mcs\n```\n\n### Scan a target\n\n```bash\n# Scan a GitHub repository\nccs-scan scan --repo https://github.com/example/mcp-server\n\n# Scan a PyPI package\nccs-scan scan --pypi mcp-server-example\n\n# Scan with custom signatures\nccs-scan scan --repo https://github.com/example/mcp-server --signatures custom-sigs/\n\n# Generate full report\nccs-scan scan --repo https://github.com/example/mcp-server --report full --format pdf\n```\n\n### API Usage\n\n```python\nfrom ccs_scanner import MCPServerScanner\n\nscanner = MCPServerScanner()\nresults = scanner.scan_repo(\"https://github.com/example/mcp-server\")\n\nfor vuln in results.vulnerabilities:\n    print(f\"[{vuln.cvss}] {vuln.title}\")\n    print(f\"  File: {vuln.file_path}:{vuln.line}\")\n    print…","publisher":null,"homepage":"https://correctover.com","repository":"https://github.com/Correctover/ccs-mcp-scanner","version":"3.0.0","license":"MIT","protocols":["mcp"],"tags":["correctover","ccs","mcp","security","scanner","audit","vulnerability"],"pricing":null,"endpoints":[{"url":"pypi:correctover-mcp-scanner","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"dev.version-control","name":"Version Control","confidence":0.825,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.768,"provenance":"derived"}],"categories":["code","dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"correctover-mcp-scanner","registry":"pypi","observedAt":"2026-09-09T13:21:57.262Z","publishedAt":"2026-07-11T00:13:24.184275Z","latestVersion":"3.0.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"correctover-mcp-scanner","url":"https://pypi.org/project/correctover-mcp-scanner/","firstSeenAt":"2026-09-09T13:20:33.627Z","fetchedAt":"2026-09-09T13:20:33.627Z","normalizedAt":"2026-09-09T13:20:33.627Z"}]},"firstSeenAt":"2026-09-09T13:20:33.627Z","updatedAt":"2026-09-09T13:21:57.262Z"}