New MCP Configuration Security Scanner for Model Context Protocol configs:
- Detects hardcoded secrets in env blocks and args (MCP001-002)
- Flags dangerous filesystem access (/, ~/, ~/.ssh) (MCP003-004, MCP007)
- Warns on HTTP without TLS (MCP005)
- Detects missing authentication for remote servers (MCP006)
- Identifies unpinned package versions (rug pull risk) (MCP008)
- Flags non-localhost binding (MCP010)

Supported config files:
- Claude Desktop: ~/.config/Claude/claude_desktop_config.json
- Cursor: .cursor/mcp.json
- VS Code: .vscode/mcp.json
- Generic: mcp.json, mcp-config.json

Scanner count updated: 43+ → 44+

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>