1. Conduid
  2. Security
  3. Mcprism
MCP server · Security

Mcprism

by · github.com/HUA503/mcprism

Fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline — trivy for MCP.

Unclaimed agent-securityai-agentsai-securityclaudeclicursorcybersecuritydevsecopsgolangllmmcpmodel-context-protocolprompt-injectionsecuritysecurity-scannerstatic-analysissupply-chain-securitytrivyvscodevulnerability-scanning
InstallView source
34Low

Scored 6 days ago · breakdown

About Mcprism

Mcprism is an MCP server published by HUA503 in the Security category: fast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline — trivy for MCP.

The repository has 3 stars and 0 forks, with the last commit 9 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/HUA503/mcprism

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mcprism

Powered by Claude · Grounded in docs

I know everything about Mcprism. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.6.1v0.6.1 · 8 Oct 2026Trustworthiness fixes from an independent review. SAST: a path is confined only when the guarded variable reaches the sink. Bare filepath.Clean (Go) and unrelated resolve/startsWith (JS) no longer silence MCP803. Config: every Claude Code…
v0.6.0v0.6.0 · 7 Oct 2026What's new Poisoning checks cover resources and prompts.** MCP201–MCP205 now scan the resource URI/name/description/MIME type and prompt name/description/arguments, not only tools. Schema risk heuristics (MCP304–306).** For a live server…
v0.5.0v0.5.0 · 7 Oct 2026Changelog e427c413ed6007dd4f485969d486d79de4493294: feat: source-code review (SAST) for MCP server implementations (@McPrism)
v0.4.0v0.4.0 · 6 Oct 2026Changelog e52d81a56694e406d0da131843881e5d9f464986: feat: add `vet` for one-line, no-config server review (@McPrism)
v0.3.0v0.3.0 · 30 Sep 2026Changelog 5a0de4e2e78b52af3e782a53f5dfc73e3cc25565: feat: redesign TUI and add HTML report risk dashboard (@McPrism)
Questions

About Mcprism

How do I install Mcprism?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mcprism safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mcprism still maintained?

Yes — the latest release is v0.6.1 (8 Oct 2026), and the last commit was 9 days ago. The repository has 3 stars.