{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ttwr49v4hpxg","handle":"dfx-mcp-scanner","url":"https://wellknown.network/agents/dfx-mcp-scanner","links":{"self":"https://wellknown.network/agents/dfx-mcp-scanner/record.json","html":"https://wellknown.network/agents/dfx-mcp-scanner","markdown":"https://wellknown.network/agents/dfx-mcp-scanner/record.md","api":"https://wellknown.network/api/v1/agents/dfx-mcp-scanner","status":"https://wellknown.network/api/v1/agents/dfx-mcp-scanner/status","claim":"https://wellknown.network/agents/dfx-mcp-scanner/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/dfx-mcp-scanner/claim.json","badge":"https://wellknown.network/agents/dfx-mcp-scanner/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:dfx-mcp-scanner","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"dfx-mcp-scanner","summary":"Security scanner for MCP (Model Context Protocol) servers. Detect malicious tools, data exfiltration, and supply chain risks.","description":"# MCP Scanner\n\n> **Security scanner for MCP (Model Context Protocol) servers.** Detect malicious tools, data exfiltration, and supply chain risks before connecting an MCP server to your AI agent.\n\n[![PyPI](https://img.shields.io/pypi/v/dfx-mcp-scanner?style=flat-square&logo=pypi&logoColor=white&color=2ea043)](https://pypi.org/project/dfx-mcp-scanner/)\n[![Python 3.10+](https://img.shields.io/badge/Python-3.10+-3776AB?style=flat-square&logo=python&logoColor=white)](https://python.org)\n[![License: MIT](https://img.shields.io/badge/License-MIT-green?style=flat-square)](LICENSE)\n[![CI](https://img.shields.io/badge/CI-GitHub%20Actions-2088FF?style=flat-square&logo=github-actions&logoColor=white)](https://github.com/dockfixlabs/mcp-scanner/actions)\n\n---\n\n## Why MCP Scanner?\n\nMCP servers give AI agents (Claude Code, Cursor, Copilot) direct access to tools, filesystems, and APIs. **But nobody is checking if those servers are safe.**\n\nMCP Scanner analyzes:\n- MCP server config files (Claude Code, Cursor, generic)\n- Command-level risks (`npx --yes`, `curl|bash`, `sudo`)\n- Secret exposure in environment variables\n- Filesystem and network access patterns\n- Source code of MCP server implementations (with AgentGuard integration)\n\n## Quick Start\n\n```bash\npip install dfx-mcp-scanner\n\n# Scan your Claude Code MCP config\nmcp-scanner\n\n# Scan a specific config\nmcp-scanner ~/.cursor/mcp.json\n\n# JSON output\nmcp-scanner .mcp.json --format json\n```\n\n## What It Detects\n\n| Rule | Severity | Description |\n|------|----------|-------------|\n| Remote code execution | CRITICAL | `curl | bash` patterns in server startup |\n| Auto-install packages | HIGH | `npx --yes` without version pinning |\n| Privileged execution | CRITICAL | Server running as root/sudo |\n| Secret exposure | CRITICAL | Real API keys/tokens in config env vars |\n| Host filesystem access | HIGH | Server accessing `/etc`, `/root`, `/proc` |\n| External network access | MEDIUM | Server connecting to non-localhost URLs |\n| Excessive tool …","publisher":{"name":"Dockfix Labs","url":null},"homepage":"https://github.com/dockfixlabs/mcp-scanner","repository":"https://github.com/dockfixlabs/mcp-scanner#readme","version":"0.4.0","license":null,"protocols":["mcp"],"tags":["mcp","model-context-protocol","security","scanner","ai-agents","claude","cursor"],"pricing":null,"endpoints":[{"url":"pypi:dfx-mcp-scanner","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"dev.filesystem","name":"Filesystem","confidence":1,"provenance":"derived"},{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":0.802,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.768,"provenance":"derived"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"dfx-mcp-scanner","registry":"pypi","observedAt":"2026-09-09T14:33:19.202Z","publishedAt":"2026-07-05T21:07:22.479531Z","latestVersion":"0.4.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"dfx-mcp-scanner","url":"https://pypi.org/project/dfx-mcp-scanner/","firstSeenAt":"2026-09-09T14:31:30.603Z","fetchedAt":"2026-09-09T14:31:30.603Z","normalizedAt":"2026-09-09T14:31:30.603Z"}]},"firstSeenAt":"2026-09-09T14:31:30.603Z","updatedAt":"2026-09-09T14:33:19.202Z"}