Snyk Agent Scan (formerly mcp-scan)

Scan installed MCP servers and skills for security risks

★ Stars3.2k3,151 on GitHub
Last commit15 Oct 2026
LicenceApache-2.0SPDX, from the repository
View on GitHub ↗

From GitHub, fetched 19 Oct 2026.

Checks your agent setup for prompt-injection in tool descriptions, tool poisoning and risky configurations. Started at Invariant Labs, now under Snyk.

At a glance

Runs asApp
TypeAgent tooling
Maintained byCommunity

Sources: github.com/snyk/agent-scan, checked 19 Oct 2026. “Runs as” is from this listing. Blank means we haven't found it in official docs yet, not that it's unsupported.

In collections

Related tools

FastAPI-MCP

MCP tooling

Expose FastAPI endpoints as MCP tools

Stars
★ 12k
Licence
MIT
Updated
  • Agent tooling
  • Community

MCP Inspector

MCP tooling

Visual tool for testing and debugging MCP servers

Stars
★ 11.1k
Licence
Apache-2.0 / MIT (MCP licence transition)
Updated
  • Agent tooling
  • Official

mcp-use

MCP tooling

Connect any LLM to any MCP server in a few lines

Stars
★ 10.8k
Licence
MIT
Updated
  • Agent tooling
  • Community

mcp-agent

MCP tooling

Build agents from MCP servers and simple workflow patterns

Stars
★ 8.6k
Licence
Apache-2.0
Updated
  • Agent tooling
  • Community

ToolHive

MCP tooling

Deploy and manage MCP servers securely

Stars
★ 2.3k
Licence
Apache-2.0
Updated
  • Agent tooling
  • Community

Docker MCP Gateway

MCP tooling

Run MCP servers in containers behind one gateway

Stars
★ 1.6k
Licence
MIT
Updated
  • Agent tooling
  • Official