Back to Browse

Mcpcheck MCP Server

Developer ToolsLow Risk9.5MCP RegistryRemote
Free

Server data from the Official MCP Registry

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

About

Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.

Remote endpoints: streamable-http: https://mcpcheckup.xyz/api/mcp

Security Report

9.5
Low Risk9.5Low Risk

Valid MCP server (4 strong, 2 medium validity signals). 1 known CVE in dependencies Imported from the Official MCP Registry.

2 tools verified · Open access · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-fpetitit-mcpcheckup": {
      "url": "https://mcpcheckup.xyz/api/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mcpcheck

A webcheck.xyz-style scanner for remote MCP servers.

Enter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:

  • Connectivity & Handshake — protocol negotiation, server info, advertised capabilities.
  • Tools, Resources & Prompts — full inventory with schemas.
  • Security Heuristics — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.
  • Network & TLS — certificate validity, HTTP security headers, CORS policy.
  • License Information — presence of a LICENSE file or license mention in server instructions.

Development

npm install
npm run dev

Open http://localhost:3000 and paste an MCP server URL to scan.

Notes

  • Only http:// and https:// targets are accepted; scanning private/internal IP ranges or localhost is blocked to prevent SSRF.
  • Security checks are heuristic, not a substitute for a manual security review.

Reviews

No reviews yet

Be the first to review this server!