Skip to content

v0.1.0 — first public release

Choose a tag to compare

@willianpinho willianpinho released this 09 Jun 22:33
· 6 commits to master since this release

Read-only scanner for MCP / AI-agent gateway production-readiness anti-patterns. Point it at a repo, get a 7-dimension red/yellow/green score in seconds.

Three ways to run

  • CLI: npx mcp-gateway-scan ./your-repo
  • CI gate: npx mcp-gateway-scan --ci ./your-repo (exits non-zero on any red)
  • MCP server (Claude Code / Cursor): claude mcp add gateway-scan -- npx -y mcp-gateway-scan mcp → ask your agent to "scan my gateway"

What it checks (7 dimensions)

Tool-access governance & RBAC · fail-close posture · onboarding & supply-chain pinning · observability/OTel · multi-LLM routing & cost · secrets & identity · production-readiness.

Guarantees

100% read-only — never executes your code, never makes network calls, and never prints a secret value (location only, redacted). MIT licensed.

The free wedge for a full MCP Gateway Readiness Audithttps://willianpinho.com/mcp-audit