Show HN: Guardmcp – I scanned the official MCP registry with a config scanner

Category: security

Tags: mcp, security-scanner, static-analysis, sarif, owasp

Score: 7.3/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 7)

GuardMCP is a security scanner for MCP (Model Context Protocol) servers and configs, detecting hardcoded secrets, tool poisoning, insecure transport, and other vulnerabilities. It provides terminal, JSON, and SARIF output for GitHub Code Scanning, with 33 rules mapped to the OWASP MCP Top 10. The project stands out for its comprehensive rule set, live introspection, and validated SARIF output.

Target audience: security engineers, devops, backend developers, AI engineers

Repository: https://github.com/BerkantACUN/guardmcp · TypeScript · Apache-2.0 · 2 stars

View on Hacker News