Static Security ScannerZero Server Uploads

MCP Config Security Linter

Scan your claude_desktop_config.json, mcp.json, or config.toml for leaked credentials, unsafe sandbox paths, and unpinned packages with 1-click remediation.

FRating
0/100
9 Issues Found
3 servers audited
Paste Configuration (JSON / TOML)
Auto-Remediation Available

Automatically convert plaintext credentials into environment references and constrain root paths.

Security & Linter Findings (9)Format: JSON
Plaintext Secret Detected (GitHub Personal Access Token)
SEC-002

Exposed plaintext credential string matching GitHub Personal Access Token found directly in configuration.

Remediation:

Replace with environment variable expansion (e.g. '${GITHUB_TOKEN}') and inject via your host environment or .env file.

Plaintext Secret Detected (Database URL with Password)
SEC-002

Exposed plaintext credential string matching Database URL with Password found directly in configuration.

Remediation:

Replace with environment variable expansion (e.g. '${GITHUB_TOKEN}') and inject via your host environment or .env file.

Plaintext Secret Detected (Hardcoded API Key / Secret Token)
SEC-002

Exposed plaintext credential string matching Hardcoded API Key / Secret Token found directly in configuration.

Remediation:

Replace with environment variable expansion (e.g. '${GITHUB_TOKEN}') and inject via your host environment or .env file.

Unpinned Package Dependency
SEC-003

Server 'github' executes '@modelcontextprotocol/server-github' without a locked version tag (e.g. '@0.6.2').

Remediation:

Pin package versions to prevent breaking changes or supply-chain poisoning (e.g. '@modelcontextprotocol/server-filesystem@0.6.2').

Unpinned Package Dependency
SEC-003

Server 'filesystem' executes '@modelcontextprotocol/server-filesystem' without a locked version tag (e.g. '@0.6.2').

Remediation:

Pin package versions to prevent breaking changes or supply-chain poisoning (e.g. '@modelcontextprotocol/server-filesystem@0.6.2').

Unsafe Sandbox Path (Root Drive Exposure (e.g. C:/))
SEC-001

Filesystem server 'filesystem' exposes an overly permissive directory 'C:/'. An agent could read or overwrite system-critical files.

Remediation:

Scope the sandbox to a specific dedicated project folder (e.g. 'C:/Users/name/Projects/sandbox' or './workspace').

Unsafe Sandbox Path (Sensitive Credential Directory)
SEC-001

Filesystem server 'filesystem' exposes an overly permissive directory '~/.ssh'. An agent could read or overwrite system-critical files.

Remediation:

Scope the sandbox to a specific dedicated project folder (e.g. 'C:/Users/name/Projects/sandbox' or './workspace').

Unpinned Package Dependency
SEC-003

Server 'postgres' executes '@modelcontextprotocol/server-postgres' without a locked version tag (e.g. '@0.6.2').

Remediation:

Pin package versions to prevent breaking changes or supply-chain poisoning (e.g. '@modelcontextprotocol/server-filesystem@0.6.2').

Insecure Remote Database Connection
SEC-004

Remote database connection for 'postgres' does not enforce SSL/TLS encryption.

Remediation:

Append '?sslmode=require' to your PostgreSQL URL or enable SSL mode in database parameters.

Security Standards (2026)

All audits execute 100% locally in your browser. Configurations and secrets never touch external servers or APIs.