Launching Monday, November 30, 2026
00
:00
:00
:00
days
hours
mins
secs
About
mcp-ssrf-scan is a zero-dependency static scanner for MCP (Model Context Protocol) server source code. Its headline check: a tool handler that makes an outbound request using a caller-controlled URL with no nearby host/IP validation — the SSRF bug class BlueRock found in 36.7% of 8,000+ scanned public MCP servers.
I found this exact bug class on my own production server (sms-florin, a phone-number rental API) before I ever thought about building a scanner for it — it's the kind of bug that doesn't announce itself.
Also checks for hardcoded secrets (Stripe/AWS/GitHub/Google key patterns) and exec()/Function() calls that look like command-injection risks.
npx @sms-florin/mcp-ssrf-scan ./src
MIT licensed, no telemetry, no account needed.