Security scanner for MCP server metadata, with static rules and optional semantic analysis.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add mcpsentinel --env MCPSENTINEL_ALLOWED_HOSTS='<MCPSENTINEL_ALLOWED_HOSTS>' -- uvx mcp-guardian-scan~/.codex/config.toml
[mcp_servers.mcpsentinel]
command = "uvx"
args = ["mcp-guardian-scan"]
env = { MCPSENTINEL_ALLOWED_HOSTS = "<MCPSENTINEL_ALLOWED_HOSTS>" }
# codex mcp add mcpsentinel --env MCPSENTINEL_ALLOWED_HOSTS='<MCPSENTINEL_ALLOWED_HOSTS>' -- uvx mcp-guardian-scan~/.cursor/mcp.json
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"mcpsentinel": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-guardian-scan"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"mcpsentinel": {
"command": "uvx",
"args": [
"mcp-guardian-scan"
],
"env": {
"MCPSENTINEL_ALLOWED_HOSTS": "<MCPSENTINEL_ALLOWED_HOSTS>"
}
}
}
}Environment variables
MCPSENTINEL_ALLOWED_HOSTS
Replace the placeholders with your own credentials and keep them out of version control.