I built the first security scanner for MCP servers — here's what I found

MCP (Model Context Protocol) is now embedded in Claude, Cursor, Windsurf, GitHub Copilot, and hundreds of other AI tools. Every one of those tools runs MCP servers — and almost none of them have been security audited.

I spent the last month building

Install: pip install mcp-safeguard

I'm publishing detailed CVE write-ups as I complete responsible disclosure. What MCP servers are you running? Happy to audit them — open an issue or DM me.