MCPAmpel MCP Security Scanner
Audit every MCP server in your Claude Code or Cursor config before you grant it filesystem or API access.
Overview
MCPAmpel is a MCP server for the Ship phase that scans your installed MCP servers for security vulnerabilities using 16 detection engines.
What is this MCP server?
- Runs 16 dedicated detection engines against installed MCP server packages
- Stdio MCP transport via PyPI package mcpampel (version 0.2.2)
- Requires MCPAMPEL_API_KEY from mcpampel.com for authenticated scans
- Targets vulnerability patterns specific to Model Context Protocol servers
- Fits a pre-ship checklist alongside code review and secrets hygiene
- 16 detection engines
- Server version 0.2.2
- PyPI package identifier mcpampel
Community signal: 2 GitHub stars.
What problem does it solve?
Every new MCP server is another attack surface, and most indie builders never systematically scan what their agent can invoke.
Who is it for?
Builders maintaining a growing MCP config who want a repeatable audit pass before production or client work.
Skip if: Teams that only use built-in IDE features with zero MCP servers, or anyone expecting full-stack app pentesting in one tool.
What do I get? / Deliverables
You get structured vulnerability findings across your MCP stack so you can remove or harden risky servers before shipping.
- Vulnerability findings from 16 detection engines across configured MCP servers
- Actionable signal to disable, update, or replace risky MCP entries
- Repeatable pre-release MCP security check in your agent workflow
Recommended MCP Servers
Journey fit
How it compares
MCP-focused security scanner, not a general repository SAST skill or hosting firewall.
Common Questions / FAQ
Who is MCPAmpel for?
It is for solo and indie developers who run multiple MCP servers in Claude Code, Cursor, or similar agents and need a dedicated MCP security check.
When should I use MCPAmpel?
Use it when you add a new MCP server from PyPI or GitHub, after cloning a teammate’s config, or before you ship a product that relies on agent tool access.
How do I add MCPAmpel to my agent?
Install the mcpampel PyPI package, set MCPAMPEL_API_KEY in your environment, register the stdio MCP entry from the official server schema, and restart your agent host.