Skip to content

Releases: tamish560/mcprobe

Release list

v0.1.0

v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@tamish560 tamish560 released this 15 Jul 07:22
v0.1.0
d90fc0e

mcprobe v0.1.0

Security scanner and introspection tool for MCP servers.

Features

  • MCP client with stdio and HTTP transports
  • 18 prompt injection pattern detectors for tool, prompt, and schema descriptions
  • Tool shadowing detection across multiple servers
  • Baseline snapshots and drift detection (rug-pull attacks)
  • Path traversal detection in resource URIs
  • Missing metadata and oversized description warnings
  • Risk scoring (0-100) with severity levels
  • Output formats: text, JSON, SARIF 2.1.0

Design

  • Pure Go standard library, zero dependencies
  • Single static binary, no CGO required
  • MIT licensed
  • Builds with go build -o mcprobe

Usage

mcprobe -command 'node server.js'
mcprobe -http http://localhost:3000/mcp
mcprobe -command 'node server.js' -baseline snap.json
mcprobe -command 'node server.js' -diff snap.json
mcprobe -shadow -shadow-dir ./baselines/
mcprobe -command 'node server.js' -format sarif -out results.sarif
Assets 2
Loading