Claude MarketplacesSubmit
willianpinho avatar

MCP Gateway Scan

willianpinho/mcp-gateway-scan

A static security scanner that audits your MCP gateway code for production readiness across seven dimensions: authorization patterns, fail-open handlers, unpinned dependencies, observability gaps, cost controls, inline secrets, and operational safeguards. Exposes a single scan_gateway tool that runs read-only filesystem scans and returns color-coded findings with file locations. When it detects secrets it redacts the value and only reports the location. Built by the Provenwright audit team, this is the automated wedge version of their full cited audit service. Useful for catching anti-patterns before launch or wiring into CI to block regressions like newly committed credentials or authorization logic that fails open on errors.

GitHub stars
2
tool
1
transport
STDIO
last updated
Jun 10, 2026
View on GitHub

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

scan_gatewayRuns the gateway-readiness scan on a given repo or directory path, returning a per-dimension summary and structured result, with an optional CI gate verdict.

Runs the gateway-readiness scan on a given repo or directory path, returning a per-dimension summary and structured result, with an optional CI gate verdict.

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

mcp-gateway-scan

npm version Glama server License: MIT

Read-only static scanner for MCP / agent-gateway production-readiness anti-patterns. Point it at a repo, get a 7-dimension red/yellow/green score in seconds.

Built by the team behind the Provenwright MCP Gateway Readiness Audit — a full cited audit with evidence index, scored gap matrix, and 90-day roadmap. Full audit: provenwright.com/audit

npx mcp-gateway-scan ./path/to/your/gateway

It scans your code and config for the failure modes that turn an MCP gateway from a demo into an incident — authorization decided by the model, error handlers that fail open, unpinned supply chains, dark traces, unbounded spend, inline secrets, and missing operational levers — and prints exactly where each one lives.

View the full README on GitHub

Details

Repository
github.com/willianpinho/mcp-gateway-scan
Categories
AI & LLM Tools, Security & Pentesting
Package
mcp-gateway-scan
Transport
STDIO
Registry
MCP registry, active

Related AI & LLM Tools MCP servers

View all
10xbrainkid avatarAgentfolio Mcp Server0xbrainkid/agentfolio-mcp-serverAI agent identity verification via SATP on Solana. Trust scores and on-chain attestations.1stars
2420247jake avatarSession Forge420247jake/session-forgePersistent memory and session intelligence for AI coding assistants. Zero config.1stars
3agentnomos avatarNOMOS Cross-Border Brokeragentnomos/nomos-crossborder-brokerCross-border preflight, x402 quote and evidence receipts for A2A/MCP agent workflows.1stars
4ahmedeid1 avatarThothahmedeid1/thothRead-only MCP over an agentic SLR workspace with per-claim citation verification1stars
5slidecraft-in avatarPresentations.AIslidecraft-in/presentations-ai-mcp-serverCreate designed slide decks from a prompt, notes, or an outline, then export them or share a link.1stars
6johnny-z13 avatarProofSlipjohnny-z13/proofslipReceipt-based verification for AI agent workflows — create, verify, and poll ephemeral proof objects1stars