Sentinel Scan MCP Server

A free, open-source MCP security scanner - available as a CLI and as an MCP server - that statically scans MCP tool manifests (mcp.json) and mcpServers configs for 10 OWASP-mapped heuristics…

Local serverstdioMIT

What is the Sentinel Scan MCP Server?

sentinel-scan-cli is an MCP project maintained in the ventrova/sentinel-scan-cli repository. The maintainer describes its purpose as “A free, open-source MCP security scanner - available as a CLI and as an MCP server - that statically scans MCP tool manifests (mcp.json) and…”. Read the project documentation for the complete scope.

Installation

The documented npm package is sentinel-scan-cli. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
Heuristic	OWASP LLM Top 10
tool_description_injection	LLM01
tool_name_shadowing	LLM01
excessive_agency_schema	LLM06
indirect_injection_surface	LLM01
unpinned_remote_source	LLM03
hardcoded_credential	LLM02
overbroad_tool_scope	LLM06
missing_provenance	LLM03
missing_hitl_confirmation	LLM06
hidden_unicode_instructions	LLM01

How to install the Sentinel Scan MCP Server

{
  "mcpServers": {
    "sentinel-scan": {
      "command": "npx",
      "args": [
        "-y",
        "sentinel-scan-cli",
        "mcp-server"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.