MCP服务器安全扫描工具

node --version

npm install -g @ferrierepete/mcpshield

mcpshield scan

npx @ferrierepete/mcpshield scan

🔒 MCPShield Security Report
──────────────────────────────────────────────────
Config: /home/user/.config/claude/config.json
Date:  2026-04-02 22:15:00

Security Score: 42/100

Findings: 2 critical  3 high  1 medium

📦 filesystem-dangerous [25/100]
   Command: npx

   🔴 Broad Filesystem Access [MCPS-001]
    Server has access to path "/". This grants read/write access to sensitive system directories.
    → Fix: Restrict filesystem access to only the specific directories this server needs.
    Refs: MCP03:2025 - Privilege Escalation via Scope Creep, MCP07:2025 - Insufficient Authentication & Authorization

   🟠 Sensitive Credentials in Config [MCPS-002]
    Found 1 sensitive environment variable(s): AWS_SECRET_ACCESS_KEY
    → Fix: Use a secrets manager instead of hardcoding credentials.

📦 [Dormant] old-server [N/A]
   Command: npx
   ℹ️ Server is disabled and excluded from the security score.

📦 github-safe [100/100]
   ✅ No security issues found

mcpshield fix --dry-run

mcpshield fix

mcpshield fix --config ~/.config/Claude/claude_desktop_config.json

mcpshield scan --ai --ai-provider openai

{
  "severityThreshold": "medium",
  "ignore": ["MCPS-001"],
  "format": "pretty",
  "registry": false,
  "trustedPackages": ["@myorg/custom-mcp-server"],
  "riskyPackages": ["some-known-bad-package"],
  "ai": true,
  "aiProvider": "openai",
  "aiModel": "gpt-4o-mini",
  "aiBaseUrl": "https://api.openai.com/v1",
  "minConfidence": 0.6
}

# Auto-detect and scan your MCP config
mcpshield scan

# Scan a specific config file
mcpshield scan --config ~/.config/claude/config.json

# Output as JSON (for CI/CD)
mcpshield scan --format json

# Output as Markdown
mcpshield scan --format markdown

# Output as SARIF (for GitHub Security tab)
mcpshield scan --format sarif

# Enable remote registry checks (npm/PyPI)
mcpshield scan --registry

# Filter by severity
mcpshield scan -s high

# Ignore findings by ID or title (partial matching supported)
mcpshield scan --ignore MCPS-001 Typosquat

# Quiet mode (CI-friendly one-liner output)
mcpshield scan --quiet

# Filter out low-confidence findings (heuristic, no API key needed)
# Warns if all findings are filtered to zero
mcpshield scan --min-confidence 0.7

# AI-powered false positive reduction (BYOK — bring your own key)
mcpshield scan --ai --ai-provider openai
mcpshield scan --ai --ai-provider anthropic
mcpshield scan --ai --ai-provider gemini

# Use a custom OpenAI-compatible endpoint (Groq, Together, Ollama, etc.)
mcpshield scan --ai --ai-provider openai --ai-base-url http://localhost:11434/v1

# GitHub Actions — JSON output
- name: MCP Security Scan
  run: npx @ferrierepete/mcpshield scan --format json
  # Exits with code 2 for critical, 1 for high findings

# GitHub Actions — SARIF for Security tab
- name: MCP Security Scan (SARIF)
  run: npx @ferrierepete/mcpshield scan --format sarif > results.sarif

- name: Upload SARIF
  uses: github/codeql-action/upload-sarif@v3
  with:
    sarif_file: results.sarif

import { pluginRegistry, definePlugin, createFinding } from '@ferrierepete/mcpshield';

pluginRegistry.register(definePlugin({
  name: 'my-org-policy',
  description: 'Enforce internal security policies',
  scan: (serverName, config) => {
    const findings = [];
    // Your custom checks here
    if (!config.env?.AUDIT_LOG) {
      findings.push(createFinding({
        title: 'Missing Audit Log',
        description: 'Internal policy requires AUDIT_LOG env var.',
        severity: 'medium',
        category: 'configuration',
        serverName,
        remediation: 'Add AUDIT_LOG=true to the server environment.',
      }));
    }
    return findings;
  },
}));

import {
  scanAllServers,
  scanAllServersWithRegistry,
  scanServer,
  loadConfig,
  autoDetectConfig,
  discoverConfigs,
} from '@ferrierepete/mcpshield';

// Load a config file
const config = loadConfig('/path/to/mcp.json');

// Run a local scan
const result = scanAllServers(config.mcpServers, '/path/to/mcp.json');
console.log(`Score: ${result.summary.score}/100`);
console.log(`Critical: ${result.summary.critical}`);

// Run with remote registry verification
const fullResult = await scanAllServersWithRegistry(config.mcpServers, '/path/to/mcp.json');

// Scan a single server
const serverResult = scanServer('my-server', config.mcpServers['my-server']);

// Access per-server findings
for (const server of fullResult.servers) {
  console.log(`${server.name}: ${server.findings.length} findings`);
  for (const finding of server.findings) {
    console.log(`  [${finding.severity}] ${finding.title}`);
    console.log(`  Fix: ${finding.remediation}`);
  }
}

// Discover config file paths
const paths = discoverConfigs();

import type {
  ScanResult,       // Top-level result from scanAllServers
  ServerScanResult, // Per-server findings and score
  Finding,          // Individual security finding
  Severity,         // 'critical' | 'high' | 'medium' | 'low' | 'info'
  FindingCategory,  // 'supply-chain' | 'permissions' | 'configuration' | 'authentication' | 'network' | 'data-exposure'
  MCPConfig,        // Parsed MCP config file shape
  MCPServerConfig,  // Individual server config
  AIConfig,         // AI provider configuration
  AIVerdict,        // 'confirmed' | 'likely-false-positive' | 'needs-review'
  AIProviderType,   // 'openai' | 'anthropic' | 'gemini'
  Plugin,           // Plugin definition (name, description, scan function)
  PluginScanner,    // Plugin scanner function type
} from '@ferrierepete/mcpshield';