Stack Gems
Menu
WorkbenchBestNewSkillsLogAboutSubmit
← Catalog

MCP Scanner (Cisco)

Apache MCP security scanner — YARA, LLM, Cisco AI Defense

AI Agents / Security · Apache-2.0 · 1.1k

Reviewed 2026-10-02 · last push 2026-10-16 · repo checked 2026-10-19

Visit siteGitHub

What's Good

Apache-2.0 (cisco-ai-defense/mcp-scanner). PyPI `cisco-ai-mcp-scanner` (HTTP 200). CLI and REST modes; multi-engine scans (YARA / LLM / Cisco AI Defense), dependency/CVE checks, readiness static analysis, offline JSON scan for CI, OAuth for live MCP connections. Aimed at MCP supply-chain review, not a generic AppSec suite.

The Catch

Vs SkillSpector / AI-Infra-Guard / destructive-command-guard: SkillSpector gates agent skills; AI-Infra-Guard is a broader red-team platform; dcg blocks destructive host commands — MCP Scanner’s catch is scanning MCP servers/tools/prompts/resources. Full Cisco AI Defense / VirusTotal paths need keys and network; treat OSS engines as the free bar and cloud engines as optional cost/trust.

Verdict

Apache MCP server/tool scanner when you must gate MCP supply chain — not SkillSpector skills-only, not AI-Infra-Guard red-team platform, not dcg host hooks.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Reviewed on Stack Gems

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/mcp-scanner.svg)](https://stackgems.com/gems/mcp-scanner)

HTML

<a href="https://stackgems.com/gems/mcp-scanner"><img src="https://stackgems.com/badge/mcp-scanner.svg" alt="MCP Scanner (Cisco) reviewed on Stack Gems" height="20"></a>

Related

AI Agents →