Cisco MCP Scanner

Name: Cisco MCP Scanner
Author: Cisco AI Defense

by Cisco AI Defense

Inspect MCP servers before you plug them in

Checks MCP servers and their tools with YARA rules, LLM analysis and package checks for hidden attacks.

Open SourceTrust 100Some practice neededTerminal · Python · Docker · Linux

Download

Checked sourceWhat does “checked” mean?github.com/cisco-ai-defense/mcp-scannerLicence: Apache-2.0checked 6 hours agoVersion 4.8.7 · 20 Oct 2026

Have it set up for you instead:Request setup by OROBOOr start with the AI Compass: a written assessment at a fixed price of €490 (businesses only).

How it runs for youI am

Simulation starting …

Illustration, not a real test run

What you get

01Checks tool descriptions for hidden instructions
02Combines YARA rules, LLM analysis and package checks
03Free and open source (Apache 2.0)

For you if …

Developers using third-party MCP servers
Platforms that list MCP servers

Pick something else if …

If you do not use MCP servers

How to start

In three steps.

What you need

Python with uv
Access to the MCP server or config
Optionally an API key for the LLM analysis

1Install with uv tool install cisco-ai-mcp-scanner
2Point it at a server or MCP config as the README shows
3Review findings per tool and remove risky servers

Part of these packages

Cisco MCP Scanner works together with other software.

Use AI safely

Your team uses AI — with far less risk of data leaks or hijacked chatbots.

5 stepsone day for the basicsMedium

Safety check

7 of 7 checks passed

No known malicious patterns in the install instructionsactively maintainedLicence: Apache-2.0

What does “checked” mean?

Trust 100

Who is behind it?

Taken by OROBO from the official source. The maker has not joined OROBO yet.

Is the code clean?

Source code publicly visible
Licence: Apache-2.0
No known malicious patterns in the install instructions

Is it maintained?

Website reachable
Updated 1 days ago

Technical details & what we don’t check

Website loads fast
Website protection settings: 5 of 6 (website only, not the software)HSTS, CSP, nosniff, Frame-Schutz, Referrer-Policy

Claims about protection come from the maker. The trust score checks public signals, not effectiveness.

We automatically check origin, code patterns, licence, maintenance and reachability — again every day. We do not check whether the software fits your purpose, how it handles your data, or whether it works without errors. Last checked 6 hours ago. How OROBO checks

Alternatives for the same goal

Goes well with

OllamaBuild it yourself · OllamaRun language models locally with one commandOpen SourceTrust high, 97Runs offline promptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developers Lakera GuardMake it safe · Lakera (Check Point Software)Catch prompt attacks before your AI respondsFree versionTrust high, 100For businesses Cisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developers Reality DefenderMake it safe · Reality Defender Inc.Detect deepfakes in voice, images and videoFree versionTrust high, 100Beginner-friendly

Facts

Area	Make it safe
Price	Open Source
Licence	Apache-2.0
Runs on	Terminal, Python, Docker, Linux, macOS, Windows
Version	4.8.7 ↗ · 20 Oct 2026
Popular with developers	★ 1,107 GitHub
Last updated	04 Nov 2026
Source	cisco-ai-defense/mcp-scanner ↗

I am the maker