Install scan in Claude Code
claude mcp add codingselim-scan -- npx -y owasp-mcp-scan{
"mcpServers": {
"codingselim-scan": {
"command": "npx",
"args": [
"-y",
"owasp-mcp-scan"
]
}
}
}Frequently asked questions
What does the scan MCP server do?
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
Is the scan MCP server free?
Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.
Does scan run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add scan to Claude Code?
Run: claude mcp add codingselim-scan -- npx -y owasp-mcp-scan
More security & identity MCP servers
View allXrpl Identity
jarod-vyent/xrpl-identity-mcp
MCP server for XRPL identity: DIDs, credentials, signer lists, and safe transaction workflows.
Korea Company Data
lichtsalz/korea-data
Korean company identity, registration status and monthly payroll-based employment, in English.
PreClick
cybrlab-ai/preclick-mcp
PreClick scans links for threats and confirms intent match with high accuracy before agents click.
Husk
husk-security/husk
Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
PriorSeal
imokokok/PriorSeal
Bounded authorization and independently verifiable execution evidence for agents.
hush
omarei-omoto/hush
Team secrets your AI agent can use but never read: encrypted in the repo, value-blind tools.