1. Conduid
  2. Security
  3. Authscan
MCP server · Security

Authscan

by · github.com/LHMisme420/mcp-authscan

Static detector for self-rolled-auth failure classes in MCP servers. Part of VATA — receipts over promises.

Unclaimed appsecmcpmodel-context-protocoloauthsecuritystatic-analysisvulnerability-scanner
InstallView source
34Low

Scored 6 days ago · breakdown

About Authscan

Authscan is an MCP server published by LHMisme420 in the Security category: static detector for self-rolled-auth failure classes in MCP servers. Part of VATA — receipts over promises.

The repository has 1 stars and 0 forks, with the last commit 11 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/LHMisme420/mcp-authscan

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Authscan

Powered by Claude · Grounded in docs

I know everything about Authscan. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.9.4v0.9.4 · 6 Oct 2026Scan a file target. Warn when fixtures are skipped. Flag issuer wrappers, conditional expectedIssuer, and lockfile pins.
v0.9.3v0.9.3 · 5 Oct 2026D1 flags @modelcontextprotocol/sdk below 1.31.0 and @modelcontextprotocol/client below 2.2.0 (GHSA-6qxp-vccf-f47h).
v0.9.2v0.9.2 · 5 Oct 2026D1 now flags mcp ranges that can install a GHSA-qx49-fqc8-xw99 version, not only exact pins.
v0.9.1v0.9.1 · 5 Oct 2026D1 flags an mcp pin inside GHSA-qx49-fqc8-xw99. Upgrade to 1.30.0 or 2.2.0 and set issuer=.
v0.9.0v0.9.0 · 5 Oct 2026PyPI release. Detector hits fail CI. Review notes do not. Install: pip install mcp-authscan==0.9.0
Questions

About Authscan

How do I install Authscan?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Authscan safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Authscan still maintained?

Yes — the latest release is v0.9.4 (6 Oct 2026), and the last commit was 11 days ago. The repository has 1 stars.