1. Conduid
  2. Files
  3. Mcpsnare
MCP server · Files

Mcpsnare

by · github.com/Den-Sec/mcpsnare

Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confidence. Like Burp's Active Scan, but the target is an MCP server. stdio + HTTP.

Unclaimed ai-securityappsecclicommand-injectiondastllm-securitymcpmodel-context-protocolpentestpentestingpythonsecuritysecurity-scannerssrfvulnerability-scanner
InstallView source
34Low

Scored a month ago · breakdown

About Mcpsnare

Mcpsnare is an MCP server published by Den-Sec in the Files category: active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confidence. Like Burp's Active Scan, but the target is an MCP server. stdio + HTTP.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Den-Sec/mcpsnare

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Mcpsnare

Powered by Claude · Grounded in docs

I know everything about Mcpsnare. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.5.0mcpsnare 0.5.0 — confirm the code sink + honest reports · 23 Jul 2026The passive lens *flagged* an `execute_revit_code`-style tool; the active checks couldn't confirm* it, because shell metacharacters are a `SyntaxError` inside a language interpreter. And a bare `results: []` couldn't be told apart from…
v0.3.0mcpsnare 0.3.0 · 11 Jun 2026First PyPI release (formerly `mcprobe`). Active, confirmation-driven security scanner for MCP servers — Burp Active Scan, for MCP. Rebrand `mcprobe` → `mcpsnare`; PyPI debut. Live HTTP transport end-to-end tested (in-process…
Questions

About Mcpsnare

How do I install Mcpsnare?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Mcpsnare safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Mcpsnare still maintained?

Yes — the latest release is v0.5.0 (23 Jul 2026), and the last commit was 2 months ago. The repository has 0 stars.