{"data":{"slug":"mcp-scanner","name":"MCP Scanner (Cisco)","tagline":"Apache MCP security scanner — YARA, LLM, Cisco AI Defense","category":"agents","categoryName":"AI Agents","url":"https://github.com/cisco-ai-defense/mcp-scanner","github":"https://github.com/cisco-ai-defense/mcp-scanner","pricing":"open-source","hook":"Cisco’s MCP Scanner is an Apache tool that scans MCP servers and tools for threats — YARA, LLM analysis, and optional Cisco AI Defense — so you gate servers before agents trust them.","whatsGood":"Apache-2.0 (cisco-ai-defense/mcp-scanner). PyPI `cisco-ai-mcp-scanner` (HTTP 200). CLI and REST modes; multi-engine scans (YARA / LLM / Cisco AI Defense), dependency/CVE checks, readiness static analysis, offline JSON scan for CI, OAuth for live MCP connections. Aimed at MCP supply-chain review, not a generic AppSec suite.","theCatch":"Vs SkillSpector / AI-Infra-Guard / destructive-command-guard: SkillSpector gates agent skills; AI-Infra-Guard is a broader red-team platform; dcg blocks destructive host commands — MCP Scanner’s catch is scanning MCP servers/tools/prompts/resources. Full Cisco AI Defense / VirusTotal paths need keys and network; treat OSS engines as the free bar and cloud engines as optional cost/trust.","verdict":"Apache MCP server/tool scanner when you must gate MCP supply chain — not SkillSpector skills-only, not AI-Infra-Guard red-team platform, not dcg host hooks.","addedAt":"2026-10-02","featured":false,"domain":"AI Agents","subSpecialty":"Security","subcategory":"Security","tags":["mcp","self-host","local-first","permissive","security","active"],"capabilities":["mcp","security","scanning"],"surfaces":["MCP","Self-host"],"ecosystem":["Python","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":1094,"starsPerWeek":20,"access":"free","archived":false,"repo":{"createdAt":"2025-09-24","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"claude-code","name":"Claude Code","tagline":"Terminal-first coding agent with deep repository context"},{"slug":"cursor","name":"Cursor","tagline":"The AI-first code editor that understands your codebase"},{"slug":"devin","name":"Devin","tagline":"Autonomous AI engineer for defined engineering tasks"},{"slug":"stagehand","name":"Stagehand","tagline":"AI-native browser automation that mixes code and natural language"},{"slug":"browser-use","name":"Browser Use","tagline":"Open-source framework for LLM-driven browser agents"}],"links":{"self":"/api/gems/mcp-scanner","html":"/gems/mcp-scanner","markdown":"/gems/mcp-scanner.md","category":"/api/gems?category=agents","categoryPage":"/stacks/agents"}}