Get a security assessment of MCP servers directly from your terminal

Show HN: Get a security assessment of MCP servers directly from your terminal

Operating in show hn launch, Get a security assessment of MCP servers directly from your terminal operates.

Profile

I built a deterministic scanner that catches command injection, prompt-injection markers in tool descriptions, over-broad/destructive tools, and committed secrets in MCP servers before you connect them. It continuously scans the entire official MCP registry and makes results available at https://index.canopii.dev.Now the engine behind that scanner is available as a CLI that you can integrate into your processes and CI/CD pipelines (e.g --min-grade B).If you are building MCP servers, you can make sure your MCP server is secure using the local mode before publishing it. Or check why your server scored low, apply fixes, check if your score has improved locally first before publishing a new vers

Its activity falls under show hn launch; the profile below is assembled from public directory data.

The company is listed at the Show HN launch stage of development.

Website: index.canopii.dev/cli