Quickstart

mcpprobe token your-server.example
# Publish this DNS TXT record, then run with --active --verify dns-txt:
#   _mcpprobe.your-server.example.  TXT  "mcpprobe-verification=<token>"

mcpprobe https://your-server.example/mcp --active --verify dns-txt \
  --authorised-by "platform security, CHG-1234" \
  --scope "https://your-server.example/mcp" --json scan.json

mcpprobe <url>                   passive scan of a remote MCP server
mcpprobe --stdio "<command>"     spawn and scan a local stdio server
mcpprobe checks                  list every check with mode, severity and standards
mcpprobe token <host>            create an ownership token for --verify dns-txt

  --header "Name: value"         extra HTTP header, e.g. a bearer token you own (repeatable)
  --env KEY=VALUE                environment for a stdio server (repeatable)
  --fail-on info|low|medium|high|critical   exit 1 at or above this severity (default high)
  --json FILE                    full JSON report, with evidence
  --sarif FILE                   SARIF 2.1.0 report
  --sarif-location PATH          repository file to anchor SARIF results to
  --baseline FILE                META-02 baseline to compare against and update
  --no-write-baseline            compare against --baseline without updating it
  --rate N                       requests per second (default 5, ceiling 10)
  --timeout SECONDS              per-request timeout (default 15)
  --only ID / --skip ID          run or skip specific checks (repeatable)
  --no-follow-as                 AUTH-03: do not fetch authorization-server metadata on third-party hosts
  --insecure                     do not verify the target's TLS certificate
  -v / -q                        verbose / quiet terminal output

  --active                       enable active checks; requires all three of:
  --authorised-by TEXT           who authorised this scan (name, role, ticket)
  --scope TEXT                   the agreed scope statement
  --verify dns-txt|local         ownership verification method
  --exclude-tool NAME            a tool that must never be called (repeatable)

mcpprobe https://your-server.example/mcp --baseline .mcpprobe/baseline.json

name: MCP security
on: [push, pull_request]
permissions:
  contents: read
  security-events: write
jobs:
  mcpprobe:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: mcpprobe-dev/mcpprobe@v0.1.0
        with:
          target: https://staging.your-server.example/mcp
          fail-on: high
          sarif-output: mcpprobe.sarif
      - uses: github/codeql-action/upload-sarif@v3
        if: always()
        with:
          sarif_file: mcpprobe.sarif
          category: mcpprobe

[![mcpprobe](https://mcpprobe.tech/badge/your-server.example.svg)](https://mcpprobe.tech/r/your-server.example)

GET https://mcpprobe.tech/api/v1/status/your-server.example

{
  "host": "your-server.example",
  "status": "passing",
  "checked_at": "2026-10-19T07:40:00Z",
  "expires_at": "2026-11-18T07:40:00Z",
  "findings": { "critical": 0, "high": 0, "medium": 0, "low": 1 },
  "report_url": "https://mcpprobe.tech/r/your-server.example",
  "badge_url": "https://mcpprobe.tech/badge/your-server.example.svg",
  "scanner_version": "0.1.0"
}

import asyncio
from mcpprobe.checks import JudgeVerdict, ScanOptions
from mcpprobe.scanner import ScanConfig, run_scan


def judge(text: str, task: str) -> JudgeVerdict | None:
    return None  # plug in your own model here; mcpprobe makes no LLM calls


report, evidence = asyncio.run(
    run_scan(ScanConfig(target="https://your-server.example/mcp", options=ScanOptions(judge=judge)))
)
print(report.counts())