Observed arrival · 2026-11-04
MCPVetter: an MCP security scanner and code coach
A local scanner for risky MCP server configurations, paired with a secure-coding coach for Cursor and Claude Code.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers using MCP servers and AI coding clients
- Worth noticing
- Its sample report gives each finding evidence, impact, and a fix; examples flag plain-HTTP remotes and filesystem access rooted at `/`.
Field notes
The scanner is presented as a command-line tool (`npx mcpvetter scan`) that discovers configurations for Claude Code, Claude Desktop, Cursor, VS Code, Windsurf, and Gemini CLI. Its sample findings pair rule IDs and evidence with risk explanations and fixes; examples cover unencrypted remote servers and filesystem access rooted at `/`. The separate Pro offer is described as an in-client review-and-learning workflow, with rule checks and short labs.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue