Compuute MCP Security Scanner
Scan any public GitHub MCP server repository for security issues before you install or publish your own MCP package.
Overview
io.github.Compuute/compuute-scan-api is a MCP server for the Ship phase that scans public GitHub MCP-server repos for security issues using 37 MCP-specific L1 rules across 8 languages.
What is this MCP server?
- Scans public GitHub MCP-server repositories for security issues
- 37 MCP-specific L1 security rules baked into the scanner
- Analysis coverage across 8 programming languages
- Remote streamable-http MCP at scan.compuute.se
- Purpose-built for MCP server repos—not generic app SAST only
- 8 programming languages supported in analysis
- Server version 0.3.0
What problem does it solve?
Installing random MCP servers from GitHub is risky because generic linters miss MCP-specific footguns and solo builders rarely have time for manual security review.
Who is it for?
Indie devs curating MCP dependencies or publishing their own MCP server who want a quick, MCP-aware GitHub repo scan from the agent.
Skip if: Private repos you cannot expose to a public-GitHub scanner, non-MCP applications, or teams needing formal compliance pentests.
What do I get? / Deliverables
After you connect the remote scanner MCP, your agent can run a structured security pass on a GitHub MCP repo URL before you trust or ship it.
- Security findings oriented to MCP server implementations on GitHub
- Agent-readable scan output grounded in 37 MCP-specific L1 rules
- Pre-install vetting record you can attach to ship checklists
Recommended MCP Servers
Journey fit
How it compares
MCP-focused GitHub security scanner service, not an in-repo Claude skill for writing fixes.
Common Questions / FAQ
Who is io.github.Compuute/compuute-scan-api for?
Solo builders and small teams who adopt or maintain MCP servers and need automated, MCP-specific security signals on public GitHub source before install or release.
When should I use io.github.Compuute/compuute-scan-api?
Use it in Ship security when evaluating a third-party MCP listing, before merging MCP server changes, or prior to announcing a new MCP package.
How do I add io.github.Compuute/compuute-scan-api to my agent?
Register the remote MCP URL https://scan.compuute.se/mcp/ with streamable-http transport in your client, then invoke scan tools against the public GitHub MCP repo you want reviewed.