sentinel-scan-cli

active

MCP security scanner: scan MCP servers and tool manifests for tool poisoning, prompt injection, tool-name shadowing, excessive-agency schemas, unpinned/remote sources, and rug-pulls - 10 OWASP-mapped heuristics, CLI + MCP server, fully offline. Also runs

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/ventrova/sentinel-scan-cli
Package: npm: sentinel-scan-cli
Run (stdio): npx -y sentinel-scan-cli
The usual command for this package registry; check the repository README for required settings.
License: MIT
Last update: 2026-08-25
Homepage: github.com/Ventrova/sentinel-scan-cli

mcp mcp-server model-context-protocol mcp-security mcp-scanner tool-poisoning rug-pull supply-chain-security manifest-scanner security-scanner llm security

Listed in

npm · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.