MCP security scanner plugin for Claude Code, Cursor, Windsurf, and Gemini CLI. Scans installed MCP servers against 16 detection engines.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add mcpampel-security-scanner --env MCPAMPEL_API_KEY='<MCPAMPEL_API_KEY>' -- uvx mcpampel~/.codex/config.toml
[mcp_servers.mcpampel-security-scanner]
command = "uvx"
args = ["mcpampel"]
env = { MCPAMPEL_API_KEY = "<MCPAMPEL_API_KEY>" }
# codex mcp add mcpampel-security-scanner --env MCPAMPEL_API_KEY='<MCPAMPEL_API_KEY>' -- uvx mcpampel~/.cursor/mcp.json
{
"mcpServers": {
"mcpampel-security-scanner": {
"command": "uvx",
"args": [
"mcpampel"
],
"env": {
"MCPAMPEL_API_KEY": "<MCPAMPEL_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"mcpampel-security-scanner": {
"type": "stdio",
"command": "uvx",
"args": [
"mcpampel"
],
"env": {
"MCPAMPEL_API_KEY": "<MCPAMPEL_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"mcpampel-security-scanner": {
"command": "uvx",
"args": [
"mcpampel"
],
"env": {
"MCPAMPEL_API_KEY": "<MCPAMPEL_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"mcpampel-security-scanner": {
"command": "uvx",
"args": [
"mcpampel"
],
"env": {
"MCPAMPEL_API_KEY": "<MCPAMPEL_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"mcpampel-security-scanner": {
"command": "uvx",
"args": [
"mcpampel"
],
"env": {
"MCPAMPEL_API_KEY": "<MCPAMPEL_API_KEY>"
}
}
}
}Environment variables
MCPAMPEL_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.