1. Conduid
  2. Security
  3. gridinsoft/mcp-inspector
MCP server · Security

gridinsoft/mcp-inspector

Debugging and Testing tool for MCP servers

Unclaimed MIT last commit 9 months ago devtools
49Fair

Scored 5 days ago · breakdown

About gridinsoft/mcp-inspector

gridinsoft/mcp-inspector is an MCP server published by gridinsoft in the Security category: debugging and Testing tool for MCP servers.

The repository has 1 stars and 2 forks, with the last commit 9 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

uvx
uvx mcp-server-inspector
pip
pip install mcp-server-inspector

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about gridinsoft/mcp-inspector

Powered by Claude · Grounded in docs

I know everything about gridinsoft/mcp-inspector. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

@gridinsoft/mcp-inspector

MCP (Model Context Protocol) server for domain and URL security analysis powered by GridinSoft Inspector.

🛡️ Trust & Safety for AI

This MCP server allows your AI agent (Claude, Cursor, etc.) to verify any website or link. It helps answer the critical question: "Can I trust this site?"

✨ Key Features

  • Domain Reputation - Check if a site is well-known, safe, or suspicious.
  • Phishing Detection - Identify fraudulent pages designed to steal credentials.
  • Malware Scanning - Detect links hosting harmful files or scripts.
  • Real-time Engine - Access GridinSoft's global threat database.

🎁 Free Plan

Every new account gets 100 API credits per month for free. No credit card required.

🚀 Real-World Scenarios

Integrate GridinSoft's threat intelligence directly into your decision-making process:

  • Secure Development: Automatically audit third-party API endpoints, documentation links, and CDNs before adding them to your codebase.
  • Automated Documentation Review: Ask your AI to scan all external links in a README or technical specification to ensure no broken or malicious redirects exist.
  • Incident Response: Paste suspicious logs or email headers into your IDE and have the AI immediately categorize mentioned domains (e.g., C2 servers, phishing drops).
  • Proactive Security Layers: Instruct your AI agents to "never summarize content from domains with a reputation score below 70" to prevent accidental exposure to malicious content.
  • Competitive Intelligence: Safely explore new industry sites and verify the legitimacy of emerging platforms mentioned in market research tasks.
  • E-Commerce Safety: Before your AI agent recommends a product or uses prices from an unfamiliar online store, have it verify the shop's trust score first. Avoid scam sites that offer "too good to be true" deals.

🛠️ Connection Guide

1. Get your API Key

  1. Sign up at inspector.gridinsoft.com.
  2. Grab your key from the Profile page.

2. Connect to your AI

Claude Desktop

Add to your config (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "gridinsoft": {
      "command": "npx",
      "args": ["-y", "@gridinsoft/mcp-inspector"],
      "env": {
        "GRIDINSOFT_API_KEY": "your_api_key_here"
      }
    }
  }
}

Cursor or Windsurf IDE

  1. Open Settings -> Models -> MCP.
  2. Add a new command: npx -y @gridinsoft/mcp-inspector.
  3. Set environment variable GRIDINSOFT_API_KEY.

🤖 Example Prompts

Try asking your AI these questions:

  • "Is the domain example-crypto-site.com safe to use?"
  • "I received a link to http://bit.ly/xxxx. Scan it for phishing before I open it."
  • "What is the reputation of gridinsoft.com?"
  • "Should I trust this website? It looks like a login page but the URL is strange."

🔧 Available Tools

inspect_domain

Comprehensive domain security profile. Returns reputation (0-100), vendor verdicts, hosting/IP info, registrar history, and detailed security tags.

scan_url

Deep forensic URL analysis. Extracts metadata, effective URL, full redirect chain, DNS/SSL details, and forensic data (screenshots, network traffic, cookies, console logs for paid plans).

get_balance

Check your remaining credits and current subscription status.

  • Cost: Free

📊 Pricing

  • Free: 100 credits/mo ($0)
  • Basic: 1,500 credits/mo (~$44/mo)
  • Standard: 5,000 credits/mo (~$124/mo)

Sign in to your dashboard to view all available plans and detailed comparison.

🔗 Links

License

MIT

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About gridinsoft/mcp-inspector

How do I install gridinsoft/mcp-inspector?

Run uvx mcp-server-inspector, then add the server to your MCP client's configuration.

Is gridinsoft/mcp-inspector safe to use with an AI agent?

Its trust score is 49 out of 100 (fair). It passes 4 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is gridinsoft/mcp-inspector still maintained?

The last commit was 9 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.