Several specialized tools are available to help secure your MCP applications. This page provides an overview of the most popular security tools and compares their features.
MCP-Scan is a security scanning tool that inspects your MCP servers for common vulnerabilities like prompt injections, tool poisoning, and cross-origin escalations.Key Features:
Scans Claude, Cursor, Windsurf, and other file-based MCP client configurations
Detects prompt injection attacks in tool descriptions
Identifies tool poisoning vulnerabilities using Invariant Guardrails
MCPScan.ai is a dedicated web-based security scanning service for MCP servers. It’s a completely separate tool from MCP-Scan with its own feature set.Key Features:
Web-based vulnerability scanning for MCP servers
Submit GitHub repository URLs for scanning
Detailed reports on security issues
Comprehensive knowledge base with vulnerability taxonomies
Remediation guidance for identified vulnerabilities
Continuous monitoring options for enterprise users
Semgrep MCP is a server that integrates Semgrep’s powerful static analysis capabilities with MCP, allowing you to scan code for security vulnerabilities directly through MCP tools.Key Features:
Scans code for security vulnerabilities, bugs, and code quality issues
Uses Semgrep’s extensive rule sets and pattern matching
Integrates with various MCP clients (VSCode, Cursor, Claude Desktop, etc.)
Provides detailed scan results and remediation guidance
Security Recommendation
Use multiple security tools in combination for comprehensive protection. Choose MCP-Scan (CLI tool) or MCPScan.ai (web service) for MCP vulnerability scanning, Semgrep for code vulnerability detection, and Invariant Guardrails for runtime protection against attacks.
For optimal implementation of these security tools:
Regular Scanning: Run MCP-Scan CLI tool or use the MCPScan.ai web service regularly to detect new vulnerabilities
Code Review: Use Semgrep MCP during development to catch security issues early
Runtime Protection: Implement Invariant Guardrails for active protection against prompt injection
Keep Updated: Follow security updates for all MCP tools and libraries
Whitelist Tools: Use MCP-Scan’s whitelist feature to authorize verified tools
Continuous Monitoring: For production environments, consider MCPScan.ai’s enterprise monitoring option
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"MCPVerified","description":"The Authority on MCP (Model Control Protocol) - Opinionated. Curated. Verified.","colors":{"primary":"#3B82F6","light":"#60A5FA","dark":"#2563EB"},"logo":{"light":"https://mintcdn.com/gproductions/Ow-1RqqwMNqHs1-s/logo/mcpv-light.png?fit=max\u0026auto=format\u0026n=Ow-1RqqwMNqHs1-s\u0026q=85\u0026s=97238acfab359f0f206b8fdabb98de01","dark":"https://mintcdn.com/gproductions/Ow-1RqqwMNqHs1-s/logo/mcpv-dark.png?fit=max\u0026auto=format\u0026n=Ow-1RqqwMNqHs1-s\u0026q=85\u0026s=780b2497294e8822db54c3540d23b08f"},"favicon":"/logo/favicon.png","navbar":{"primary":{"type":"github","href":"https://github.com/code-agents/mcpverified"}},"footer":{"socials":{"x":"https://x.com/gunta","github":"https://github.com/code-agents/mcpverified"}},"navigation":{"global":{"anchors":[]},"languages":[{"language":"en","href":"introduction"},{"language":"ja","href":"ja/introduction"}]}},"deployment":{"deploymentMetadataValue":{"subdomain":"gproductions","hasAudioNarration":false,"actualSubdomain":"gproductions","customDomains":["mcpverified.com"],"gitSource":{"type":"github","owner":"code-agents","repo":"mcpverified","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6a21e6c103d4026a3ef7739f","collectionId":"becaeb3b-47b0-4844-8174-1867938f0f44","schemaVersion":"v2"},"feedback":{"edits":true,"issues":true,"thumbs":true},"entitlements":{},"buildId":"6a21e6c103d4026a3ef7739f:success","clientVersion":"0.0.4044","searchFilterCounts":[{"language":"ja","tag":"開発","count":12},{"language":"en","tag":"Develop","count":12},{"language":"ja","tag":"ドキュメント","count":4},{"language":"ja","tag":"学ぶ","count":4},{"language":"en","tag":"Documentation","count":4},{"language":"en","tag":"Learn","count":4},{"language":"ja","tag":"インフラとエコシステム","count":3},{"language":"en","tag":"Deploy \u0026 Ecosystem","count":3},{"language":"ja","tag":"はじめに","count":2},{"language":"ja","tag":"インフラストラクチャー","count":2},{"language":"ja","tag":"セキュリティ","count":2},{"language":"ja","tag":"サーバーフレームワーク","count":2},{"language":"en","tag":"Getting Started","count":2},{"language":"en","tag":"Infrastructure","count":2},{"language":"en","tag":"Security","count":2},{"language":"en","tag":"Server Frameworks","count":2},{"language":"ja","tag":"認証","count":1},{"language":"ja","tag":"クライアントフレームワーク","count":1},{"language":"en","tag":"Authentication","count":1},{"language":"en","tag":"Client Frameworks","count":1}]},"assistantConfig":{},"basePath":"","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"security/tools","slug":"/security/tools","pageMetadata":{"title":"MCP Security Tools","description":"Tools and solutions for securing MCP applications","icon":"toolbox","iconType":"solid","href":"/security/tools"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Tools and solutions for securing MCP applications\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,br:`br`,code:`code`,li:`li`,ol:`ol`,p:`p`,pre:`pre`,span:`span`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,ul:`ul`,..._provideComponents(),...props.components},{CodeBlock,Heading,Icon,Table,Tip}=_components;if(!CodeBlock)_missingMdxReference(`CodeBlock`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Icon)_missingMdxReference(`Icon`,true);if(!Table)_missingMdxReference(`Table`,true);if(!Tip)_missingMdxReference(`Tip`,true);return _jsxs(_Fragment,{children:[_jsx(_components.p,{children:`Several specialized tools are available to help secure your MCP applications. This page provides an overview of the most popular security tools and compares their features.`}),`\n`,_jsxs(Heading,{level:`2`,id:`available-security-tools`,children:[_jsx(Icon,{icon:`radar`,iconType:`solid`}),` Available Security Tools`]}),`\n`,_jsx(Heading,{level:`3`,id:`mcp-scan`,children:`MCP-Scan`}),`\n`,_jsx(_components.p,{children:`MCP-Scan is a security scanning tool that inspects your MCP servers for common vulnerabilities like prompt injections, tool poisoning, and cross-origin escalations.`}),`\n`,_jsx(_components.p,{children:_jsx(_components.strong,{children:`Key Features:`})}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Scans Claude, Cursor, Windsurf, and other file-based MCP client configurations`}),`\n`,_jsx(_components.li,{children:`Detects prompt injection attacks in tool descriptions`}),`\n`,_jsx(_components.li,{children:`Identifies tool poisoning vulnerabilities using Invariant Guardrails`}),`\n`,_jsx(_components.li,{children:`Detects cross-origin escalation attacks (tool shadowing)`}),`\n`,_jsx(_components.li,{children:`Implements “Tool Pinning” to prevent MCP rug pull attacks`}),`\n`]}),`\n`,_jsx(_components.p,{children:_jsx(_components.strong,{children:`Usage:`})}),`\n`,_jsx(CodeBlock,{filename:``,numberOfLines:`8`,language:`shellscript`,children:_jsx(_components.pre,{className:`shiki shiki-themes github-light-default dark-plus`,style:{backgroundColor:`#ffffff`,\"--shiki-dark-bg\":`#0B0C0E`,color:`#1f2328`,\"--shiki-dark\":`#D4D4D4`},language:`shellscript`,children:_jsxs(_components.code,{language:`shellscript`,numberOfLines:`8`,children:[_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{style:{color:`#6E7781`,\"--shiki-dark\":`#6A9955`},children:`# Quick scan`})}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`uvx`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` mcp-scan@latest`})]}),`\n`,_jsx(_components.span,{className:`line`}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{style:{color:`#6E7781`,\"--shiki-dark\":`#6A9955`},children:`# Inspect tool descriptions`})}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`uvx`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` mcp-scan@latest`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` inspect`})]}),`\n`,_jsx(_components.span,{className:`line`}),`\n`,_jsx(_components.span,{className:`line`,children:_jsx(_components.span,{style:{color:`#6E7781`,\"--shiki-dark\":`#6A9955`},children:`# Whitelist specific tools`})}),`\n`,_jsxs(_components.span,{className:`line`,children:[_jsx(_components.span,{style:{color:`#953800`,\"--shiki-dark\":`#DCDCAA`},children:`uvx`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` mcp-scan@latest`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` whitelist`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` NAME`}),_jsx(_components.span,{style:{color:`#0A3069`,\"--shiki-dark\":`#CE9178`},children:` HASH`})]}),`\n`]})})}),`\n`,_jsx(Heading,{level:`3`,id:`mcpscan-ai`,children:`MCPScan.ai`}),`\n`,_jsx(_components.p,{children:`MCPScan.ai is a dedicated web-based security scanning service for MCP servers. It’s a completely separate tool from MCP-Scan with its own feature set.`}),`\n`,_jsx(_components.p,{children:_jsx(_components.strong,{children:`Key Features:`})}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Web-based vulnerability scanning for MCP servers`}),`\n`,_jsx(_components.li,{children:`Submit GitHub repository URLs for scanning`}),`\n`,_jsx(_components.li,{children:`Detailed reports on security issues`}),`\n`,_jsx(_components.li,{children:`Comprehensive knowledge base with vulnerability taxonomies`}),`\n`,_jsx(_components.li,{children:`Remediation guidance for identified vulnerabilities`}),`\n`,_jsx(_components.li,{children:`Continuous monitoring options for enterprise users`}),`\n`]}),`\n`,_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`Access:`}),`\nAvailable via the `,_jsx(_components.a,{href:`https://mcpscan.ai`,children:`MCPScan.ai`}),` website`]}),`\n`,_jsx(Heading,{level:`3`,id:`semgrep-mcp`,children:`Semgrep MCP`}),`\n`,_jsx(_components.p,{children:`Semgrep MCP is a server that integrates Semgrep’s powerful static analysis capabilities with MCP, allowing you to scan code for security vulnerabilities directly through MCP tools.`}),`\n`,_jsx(_components.p,{children:_jsx(_components.strong,{children:`Key Features:`})}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Scans code for security vulnerabilities, bugs, and code quality issues`}),`\n`,_jsx(_components.li,{children:`Uses Semgrep’s extensive rule sets and pattern matching`}),`\n`,_jsx(_components.li,{children:`Integrates with various MCP clients (VSCode, Cursor, Claude Desktop, etc.)`}),`\n`,_jsx(_components.li,{children:`Provides detailed scan results and remediation guidance`}),`\n`]}),`\n`,_jsx(Heading,{level:`3`,id:`invariant-guardrails`,children:`Invariant Guardrails`}),`\n`,_jsx(_components.p,{children:`Invariant Guardrails provides a layer of protection against prompt injection and other attacks on LLM-based applications, including MCPs.`}),`\n`,_jsx(_components.p,{children:_jsx(_components.strong,{children:`Key Features:`})}),`\n`,_jsxs(_components.ul,{children:[`\n`,_jsx(_components.li,{children:`Defends against prompt injection attacks`}),`\n`,_jsx(_components.li,{children:`Provides real-time monitoring and detection`}),`\n`,_jsx(_components.li,{children:`Offers policy-based controls for LLM interactions`}),`\n`,_jsx(_components.li,{children:`Integrates with existing security workflows`}),`\n`]}),`\n`,_jsxs(Heading,{level:`2`,id:`security-tools-comparison`,children:[_jsx(Icon,{icon:`table`,iconType:`solid`}),` Security Tools Comparison`]}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Feature`}),_jsx(_components.th,{children:`MCP-Scan`}),_jsx(_components.th,{children:`MCPScan.ai`}),_jsx(_components.th,{children:`Semgrep MCP`}),_jsx(_components.th,{children:`Invariant Guardrails`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Provider`})}),_jsx(_components.td,{children:`Invariant Labs`}),_jsx(_components.td,{children:`mcpscan.ai`}),_jsx(_components.td,{children:`Semgrep`}),_jsx(_components.td,{children:`Invariant Labs`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Primary Focus`})}),_jsx(_components.td,{children:`CLI-based MCP server security scanning`}),_jsx(_components.td,{children:`Web-based MCP vulnerability scanning`}),_jsx(_components.td,{children:`Code vulnerability scanning`}),_jsx(_components.td,{children:`LLM interaction security`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Installation/Access`})}),_jsx(_components.td,{children:_jsx(_components.code,{children:`uvx mcp-scan@latest`})}),_jsx(_components.td,{children:`Web service`}),_jsx(_components.td,{children:_jsx(_components.code,{children:`uvx semgrep-mcp`})}),_jsx(_components.td,{children:`API integration`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Detects Prompt Injection`})}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Detects Tool Poisoning`})}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Code Vulnerability Scanning`})}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Tool Description Inspection`})}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Cross-Origin Protection`})}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Continuous Monitoring`})}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅ (Enterprise)`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`Knowledge Base`})}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:_jsx(_components.strong,{children:`License`})}),_jsx(_components.td,{children:`Apache-2.0`}),_jsx(_components.td,{children:`Commercial`}),_jsx(_components.td,{children:`MIT`}),_jsx(_components.td,{children:`Commercial`})]})]})]}),`\n`,_jsxs(Heading,{level:`2`,id:`implementation-best-practices`,children:[_jsx(Icon,{icon:`shield-check`,iconType:`solid`}),` Implementation Best Practices`]}),`\n`,_jsx(Tip,{children:_jsxs(_components.p,{children:[_jsx(_components.strong,{children:`Security Recommendation`}),_jsx(_components.br,{}),`\n`,`Use multiple security tools in combination for comprehensive protection. Choose MCP-Scan (CLI tool) or MCPScan.ai (web service) for MCP vulnerability scanning, Semgrep for code vulnerability detection, and Invariant Guardrails for runtime protection against attacks.`]})}),`\n`,_jsx(_components.p,{children:`For optimal implementation of these security tools:`}),`\n`,_jsxs(_components.ol,{children:[`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Regular Scanning`}),`: Run MCP-Scan CLI tool or use the MCPScan.ai web service regularly to detect new vulnerabilities`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Code Review`}),`: Use Semgrep MCP during development to catch security issues early`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Runtime Protection`}),`: Implement Invariant Guardrails for active protection against prompt injection`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Keep Updated`}),`: Follow security updates for all MCP tools and libraries`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Whitelist Tools`}),`: Use MCP-Scan’s whitelist feature to authorize verified tools`]}),`\n`,_jsxs(_components.li,{children:[_jsx(_components.strong,{children:`Continuous Monitoring`}),`: For production environments, consider MCPScan.ai’s enterprise monitoring option`]}),`\n`]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"MCP Security Tools","description":"Tools and solutions for securing MCP applications","icon":"toolbox","iconType":"solid","href":"/security/tools"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":" Available Security Tools","slug":"available-security-tools","depth":2,"children":[{"title":"MCP-Scan","slug":"mcp-scan","depth":3,"children":[]},{"title":"MCPScan.ai","slug":"mcpscan-ai","depth":3,"children":[]},{"title":"Semgrep MCP","slug":"semgrep-mcp","depth":3,"children":[]},{"title":"Invariant Guardrails","slug":"invariant-guardrails","depth":3,"children":[]}]},{"title":" Security Tools Comparison","slug":"security-tools-comparison","depth":2,"children":[]},{"title":" Implementation Best Practices","slug":"implementation-best-practices","depth":2,"children":[]}],"codeExamples":{}},"jsLinks":["/_mintlify/custom/gproductions/5ea1337e139d52b8/server-frameworks/snippets/mcp-sdk-example.js"],"subdomain":"gproductions","siteName":"MCPVerified","title":"MCP Security Tools - MCPVerified","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{"en":{"href":"/security/tools","matchLevel":0},"ja":{"href":"/security/ja/tools","matchLevel":1}}},"lastModified":"2026-01-07T07:47:06.265Z","originalFileLocation":"security/tools.mdx","locale":"en"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Tools and solutions for securing MCP applications\">\u003cmeta data-mint-head name=\"application-name\" content=\"MCPVerified\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"MCP Security Tools - MCPVerified\">\u003cmeta data-mint-head property=\"og:description\" content=\"Tools and solutions for securing MCP applications\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"MCPVerified\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://mcpverified.com/security/tools\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://gproductions.mintlify.app/_mintlify/api/og/v2?division=Security\u0026amp;title=MCP+Security+Tools\u0026amp;description=Tools+and+solutions+for+securing+MCP+applications\u0026amp;theme=0b449cd9272a20ae05ef62f8\u0026amp;signature=bccbe706ed2f07cdddf993baf8a693694d678f73db02c4ff95cf3cce5fd11f4f\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"MCP Security Tools - MCPVerified\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Tools and solutions for securing MCP applications\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://gproductions.mintlify.app/_mintlify/api/og/v2?division=Security\u0026amp;title=MCP+Security+Tools\u0026amp;description=Tools+and+solutions+for+securing+MCP+applications\u0026amp;theme=0b449cd9272a20ae05ef62f8\u0026amp;signature=bccbe706ed2f07cdddf993baf8a693694d678f73db02c4ff95cf3cce5fd11f4f\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/gproductions/poPmtdUAV7HmOEwm/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"MCPVerified\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#3B82F6\">\u003clink data-mint-head rel=\"canonical\" href=\"https://mcpverified.com/security/tools\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/security/tools.md\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"en\" href=\"https://mcpverified.com/security/tools\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"ja\" href=\"https://mcpverified.com/security/ja/tools\">\u003clink data-mint-head rel=\"alternate\" hreflang=\"x-default\" href=\"https://mcpverified.com/security/tools\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://mcpverified.com/#organization\",\"name\":\"MCPVerified\",\"url\":\"https://mcpverified.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/gproductions/Ow-1RqqwMNqHs1-s/logo/mcpv-light.png?fit=max\u0026auto=format\u0026n=Ow-1RqqwMNqHs1-s\u0026q=85\u0026s=97238acfab359f0f206b8fdabb98de01\"}},{\"@type\":\"WebSite\",\"@id\":\"https://mcpverified.com#website\",\"name\":\"MCPVerified\",\"url\":\"https://mcpverified.com\",\"publisher\":{\"@id\":\"https://mcpverified.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://mcpverified.com/security/tools#webpage\",\"url\":\"https://mcpverified.com/security/tools\",\"name\":\"MCP Security Tools\",\"description\":\"Tools and solutions for securing MCP applications\",\"dateModified\":\"2026-01-07T07:47:06.265Z\",\"isPartOf\":{\"@id\":\"https://mcpverified.com#website\"},\"breadcrumb\":{\"@id\":\"https://mcpverified.com/security/tools#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://mcpverified.com/security/tools#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Develop\",\"item\":\"https://mcpverified.com/doc-generators/overview\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https://mcpverified.com/security/overview\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"MCP Security Tools\",\"item\":\"https://mcpverified.com/security/tools\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://mcpverified.com/security/tools#article\",\"headline\":\"MCP Security Tools\",\"name\":\"MCP Security Tools\",\"description\":\"Tools and solutions for securing MCP applications\",\"url\":\"https://mcpverified.com/security/tools\",\"mainEntityOfPage\":{\"@id\":\"https://mcpverified.com/security/tools#webpage\"},\"dateModified\":\"2026-01-07T07:47:06.265Z\",\"publisher\":{\"@id\":\"https://mcpverified.com/#organization\"},\"isPartOf\":{\"@id\":\"https://mcpverified.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"MCPVerified\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"MCPVerified","nav":{"global":{"anchors":[]},"languages":[{"language":"en","groups":[{"group":"Learn","pages":[{"group":"Getting Started","icon":"rocket","pages":[{"title":"Welcome to MCPVerified","icon":"house","iconType":"solid","href":"/introduction"},{"title":"Setting Up Your Environment","icon":"laptop-code","iconType":"solid","href":"/environment/overview"}]},{"group":"News \u0026 Updates","icon":"newspaper","pages":[{"title":"News","icon":"newspaper","iconType":"solid","href":"/docs/news"}]},{"group":"About MCPVerified","icon":"circle-info","pages":[{"title":"Our Values at MCPVerified","icon":"heart","iconType":"solid","href":"/values/overview"}]}]},{"group":"Develop","pages":[{"group":"Documentation","icon":"book","pages":[{"title":"Documentation Generators Overview","icon":"book","iconType":"solid","href":"/doc-generators/overview"},{"title":"MCP-Compatible Documentation Generators","icon":"star","iconType":"solid","href":"/doc-generators/mcp-compatible-generators"},{"title":"GitHub-Powered MCP Documentation Servers","icon":"github","iconType":"brands","href":"/doc-generators/github-powered-servers"},{"title":"Custom Documentation Generators","icon":"gears","iconType":"solid","href":"/doc-generators/custom-doc-generators"}]},{"group":"Server Frameworks","icon":"server","pages":[{"title":"Comparison of MCP Server Frameworks","icon":"chart-bar","iconType":"solid","href":"/server-frameworks/comparison"},{"title":"OpenAPI → MCP Generators","icon":"wand-magic-sparkles","iconType":"solid","href":"/server-frameworks/openapi-generators"}]},{"group":"Client Frameworks","icon":"desktop","pages":[{"title":"Client Frameworks for MCP","icon":"desktop","iconType":"solid","href":"/client-frameworks/overview"}]},{"group":"Development Environments","icon":"laptop-code","pages":[{"title":"MCP Development Hosts","icon":"laptop-code","iconType":"solid","href":"/hosts/overview"}]},{"group":"Authentication","icon":"key","pages":[{"title":"Authentication for MCP","icon":"key","iconType":"solid","href":"/auth/overview"}]},{"group":"UI Components","icon":"palette","pages":[{"title":"UI Components Overview","icon":"window-restore","iconType":"solid","href":"/ui/overview"}]},{"group":"Security","icon":"shield-halved","pages":[{"title":"MCP Security Considerations","description":"Security best practices and considerations for MCP applications","icon":"shield","iconType":"solid","href":"/security/overview"},{"title":"MCP Security Tools","icon":"toolbox","iconType":"solid","href":"/security/tools"}]}]},{"group":"Deploy \u0026 Ecosystem","pages":[{"group":"Infrastructure","icon":"gears","pages":[{"title":"MCP Hosting Options","description":"Overview of hosting solutions for MCP applications","icon":"cloud-upload-alt","iconType":"solid","href":"/hosting/overview"},{"title":"MCP Server Implementations","icon":"server","iconType":"solid","href":"/servers/overview"}]},{"group":"Marketplaces","icon":"cart-shopping","pages":[{"title":"MCP Marketplaces","icon":"store","iconType":"solid","href":"/marketplaces/overview"}]}]}]},{"language":"ja","pages":[{"title":"ja","href":"/security/ja/tools"}]}]},"basePath":"","title":"MCP Security Tools - MCPVerified","buildId":"dpl_DeHjVRGfFnhYQwHnfC2pjeXXv8h9","deploymentId":"dpl_DeHjVRGfFnhYQwHnfC2pjeXXv8h9","dynamics":[],"chunks":[]}
