mcp-safeguard MCP Server

Detect prompt injection · credential leaks · exposed endpoints · tool poisoning

Local serverstdio

What is the mcp-safeguard MCP Server?

mcp-safeguard is an MCP project maintained in the syedanas01/mcp-safeguard repository. The maintainer describes its purpose as “Detect prompt injection · credential leaks · exposed endpoints · tool poisoning”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using python. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares MCP_SAFEGUARD_API_KEY. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
scan_mcp_server	Full scan of an MCP server: injection + credentials + endpoints + tools
scan_tool_definitions	Analyze tool JSON for injection and poisoning
check_auth_config	Audit server config for credential exposure and OAuth scope risks
check_endpoint_exposure	Probe for exposed admin/debug endpoints and dangerous ports
generate_security_report	Get report in HTML, JSON, or text
get_scan_history	List all past scans with severity scores
compare_scans	Diff two scans to detect regressions

How to install the mcp-safeguard MCP Server

{
  "mcpServers": {
    "mcp-safeguard": {
      "command": "python",
      "args": [
        "-m",
        "fastmcp",
        "run",
        "src/mcp_safeguard/server.py"
      ],
      "env": {
        "MCP_SAFEGUARD_API_KEY": "YOUR_MCP_SAFEGUARD_API_KEY"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.