mcpscan

A developer built a test harness for their mcpscan security scanner that generates synthetic attack fixtures to verify each detection rule, and found that 6 of 7 fixtures fired while the secrets-detec…

A developer shipped a security rule for mcpscan, a static scanner for MCP configs and GitHub Actions workflows, that only caught half of a privileged CI token reuse vulnerability. The rule, MCP019 in …

A security researcher developed mcpscan, a static scanner for MCP servers and Claude Code projects, after discovering tool poisoning attacks that hide malicious instructions in Unicode zero-width char…