1. Conduid
  2. Data
  3. Web Vuln Scanner MCP
MCP server · Data

Web Vuln Scanner MCP

OWASP Top 10 vulnerability scanner MCP — SQL injection, XSS, CSRF, and authentication flaw detection for web applications.

34Low

Scored a month ago · breakdown

About Web Vuln Scanner MCP

Web Vuln Scanner MCP is an MCP server published by marc-shade in the Data category: oWASP Top 10 vulnerability scanner MCP — SQL injection, XSS, CSRF, and authentication flaw detection for web applications.

Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/marc-shade/web-vuln-scanner-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (7)

analyze_security_headersCheck HTTP security headers

Parameters not published.

check_info_disclosureFind information leakage

Parameters not published.

check_ssl_configAnalyze SSL/TLS configuration

Parameters not published.

generate_vuln_reportComprehensive vulnerability report

Parameters not published.

scan_directoriesFind hidden directories and files

Parameters not published.

test_sqli_paramsTest URL parameters for SQL injection

Parameters not published.

test_xss_reflectionTest for reflected XSS

Parameters not published.

Ask AI

✦

Ask AI about Web Vuln Scanner MCP

Powered by Claude · Grounded in docs

I know everything about Web Vuln Scanner MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Web Vuln Scanner MCP

How do I install Web Vuln Scanner MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Web Vuln Scanner MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Web Vuln Scanner MCP still maintained?

The last commit was 8 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.