zn ScanAI AGENT SECURITY SCANNER · PASSIVE MCP AUDIT
Audit your Agent & MCP Server
Passive security audit for MCP servers: JSON-RPC handshake, transport and tool-schema inspection. Read-only: no tool is invoked and no payload is sent to the target. Scored on the public rubric with per-check evidence.
Read the scoring methodology (rubric v1.1)The scanner only performs the MCP handshake (initialize, notifications/initialized) and tools/list; no tool is ever called. Private, loopback and link-local addresses and non-standard ports are blocked. 20 scans per hour per IP. Targets that are not MCP servers are never published; published reports are not indexed by search engines and are deleted after 90 days.