Test MCP tools and resources for real security flaws.
Enter your MCP server address and optionally provide an authorization token. SmartScanner automatically discovers and tests tools, resources, and templates on modern stateless servers for injection flaws, security misconfigurations, information disclosure, and known vulnerabilities.
Test your MCP server
Find flaws in the operations agents can call.
Enter the server address, add an authorization token if needed, and let SmartScanner discover and test the MCP server automatically.
Download SmartScanner FreeNo signup or credit card required. Only test MCP servers you own or are authorized to assess.
Test the MCP surfaces agents actually use
MCP security testing
A tool list is not a security test.
MCP servers expose actions and data to AI clients. SmartScanner goes beyond listing tool names: it automatically discovers the server's tools and resources, calls tools, reads resources, and tests inputs defined by their templates.
Call exposed tools
Test tool operations using their defined inputs, where unsafe values can reach databases, network clients, file paths, or other downstream systems.
Read resources
Assess resource access and resource templates that accept variable input, not only the server's connection or metadata.
Test real server behavior
SmartScanner automatically exercises the discovered tools and resources to look for unsafe input handling and access-control problems.
MCP vulnerability coverage
Look for vulnerabilities in tools, templates, and server controls.
SmartScanner's MCP security checks combine tool and resource testing with server-level checks. Broader application security tests cover relevant OWASP Top 10 risks, response headers, security misconfigurations, information disclosure, and known vulnerabilities.
SQL injection
Test whether input accepted by MCP tools or resource templates is handled safely when it reaches a database.
Server-side request forgery
Check URL-like inputs and operations that may cause a server to make unintended requests.
Path traversal
Assess file or resource paths that may allow input to escape an intended directory or boundary.
Other injection risks
Exercise templated inputs for additional unsafe handling in downstream interpreters and operations.
Response security headers
Check HTTP responses for missing or misconfigured security headers that help protect clients and applications.
Security misconfigurations
Identify configuration weaknesses and exposure that can increase the attack surface of an MCP deployment.
Information disclosure
Look for sensitive details exposed in responses, errors, or server behavior—risks also covered by OWASP Top 10 categories.
Known application and server vulnerabilities
Test for supported known vulnerabilities, including React2Shell, PHP2Shell, and web server flaws.
Missing authentication
Check whether an MCP endpoint accepts unauthenticated connections and assess that behavior against its intended access model. Learn about missing MCP authentication.
Insecure response caching
Review MCP response caching for potential exposure across client or authorization contexts. Learn about MCP response caching.
Evidence on applicable findings
Some results include supporting evidence or a proof of concept when available, so you can investigate and validate the reported behavior.
A finding is a signal to investigate, not proof of exploitability. Confirm impact in your environment and follow the remediation guidance before deploying changes.
Built for modern MCP deployments
Test stateless servers with the right access context.
MCP deployments are evolving beyond long-lived sessions. SmartScanner supports modern stateless MCP servers. Enter a server address and, if it requires authorization, provide its token; SmartScanner handles discovery and security testing automatically.
SmartScanner checks both authenticated and unauthenticated access as appropriate to the credentials provided. An unauthenticated endpoint is not automatically vulnerable; findings should be assessed against the server's intended access model.
MCP assessment scope
Configure per target- Stateless MCP server endpoints
- Tool calls and argument templates
- Resource reads and resource templates
- Authorized and unauthenticated access
- Injection and MCP server security checks
How it works
Enter an address. SmartScanner handles discovery and testing.
Provide the MCP server address and optionally an authorization token. SmartScanner automatically discovers available tools and resources, tests them for vulnerabilities, and presents the findings for review.
- 01
Enter the server address
Add the address of an MCP server you own or have permission to test. No manual tool or resource inventory is needed.
- 02
Add a token if required
If the server requires authorization, provide its token. SmartScanner then automatically discovers and tests tools, resources, and templated inputs.
- 03
Review the findings
Inspect detected issues and any available evidence, address the underlying problems, then run another scan to check your changes.
Know what you are testing
MCP tool poisoning and injection testing are different problems.
A malicious or misleading tool description can influence an AI client; an injection flaw in a tool or resource template can expose unsafe handling in the server or a downstream system. They are related parts of MCP security, but they are not the same test.
SmartScanner automatically discovers and exercises the server-side tools and resources exposed by your MCP endpoint. You only need to provide the server address and, when required, an authorization token.
Keep testing within scope
MCP tools may trigger external requests, access data, or change state. Run tests only against servers you own or have explicit authorization to assess, and use a test environment when operations can affect production data.
Automated results do not replace code review, threat modeling, or a full review of the MCP client and deployment.
MCP scanner FAQ
Questions about MCP server security testing
Can SmartScanner test stateless MCP servers?
Yes. SmartScanner supports security testing for modern stateless MCP servers, including tool calls and resource reads.
What vulnerabilities can an MCP security scan find?
SmartScanner can test tool and resource templates for SQL injection, SSRF, path traversal, and other injection vulnerabilities. It also checks response security headers, security misconfigurations, information disclosure, missing authentication, insecure response caching, and known vulnerabilities in supported applications and web servers. These include relevant risks from OWASP Top 10 categories.
Do findings include proof or evidence?
Some findings include supporting evidence or a proof of concept when available. The details depend on the vulnerability and what the test can safely confirm.
Can I scan an MCP server that requires authorization?
Yes. SmartScanner can test authorized MCP servers as well as servers that allow unauthenticated access. Use credentials only for systems you are authorized to assess.
Does SmartScanner run as an online MCP scanner?
No. SmartScanner is a Windows desktop application. Enter the server address and optionally an authorization token. It automatically discovers the tools and resources, then checks for vulnerabilities. Download SmartScanner Free.
Does a clean scan guarantee that an MCP server is secure?
No. A scan only tests the reachable behavior and conditions in scope. Review code, configuration, client behavior, and permissions too, and retest after you make changes.
Test your MCP server
Find the flaws in the tools and resources your agents can reach.
Download SmartScanner for Windows and test an authorized MCP server for injection risks and security issues.
Download SmartScanner FreeFree edition. No signup or credit card required.