# MCP Scanner (Cisco)

> Apache MCP security scanner — YARA, LLM, Cisco AI Defense

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://github.com/cisco-ai-defense/mcp-scanner  
**GitHub:** https://github.com/cisco-ai-defense/mcp-scanner  
**Added:** 2026-10-02

---

## The Hook

Cisco’s MCP Scanner is an Apache tool that scans MCP servers and tools for threats — YARA, LLM analysis, and optional Cisco AI Defense — so you gate servers before agents trust them.

## What's Good

Apache-2.0 (cisco-ai-defense/mcp-scanner). PyPI `cisco-ai-mcp-scanner` (HTTP 200). CLI and REST modes; multi-engine scans (YARA / LLM / Cisco AI Defense), dependency/CVE checks, readiness static analysis, offline JSON scan for CI, OAuth for live MCP connections. Aimed at MCP supply-chain review, not a generic AppSec suite.

## The Catch

Vs SkillSpector / AI-Infra-Guard / destructive-command-guard: SkillSpector gates agent skills; AI-Infra-Guard is a broader red-team platform; dcg blocks destructive host commands — MCP Scanner’s catch is scanning MCP servers/tools/prompts/resources. Full Cisco AI Defense / VirusTotal paths need keys and network; treat OSS engines as the free bar and cloud engines as optional cost/trust.

## Verdict

Apache MCP server/tool scanner when you must gate MCP supply chain — not SkillSpector skills-only, not AI-Infra-Guard red-team platform, not dcg host hooks.