Scan & Protect
Every MCP Server
Your AI Agents Use.
MCPGuardian scans your MCP config, tells you exactly what's unsafe, gives you the fixed config to apply, and blocks attacks at runtime. Free for 50 scans/month.
Trusted by security teams worldwide
0
MCP servers scanned
0
Rug pulls detected
0
CVEs tracked
0
Configs monitored
How MCPGuardian Works
From scan to fix in under 10 seconds. No security expertise required.
Paste Your MCP Config
Drop your MCP server configuration JSON — we analyze every server, package, and permission.
Supports Claude Desktop, Cursor, Kiro, Windsurf, and any MCP-compatible client.
Get the Exact Fix
We don't just tell you what's wrong. We give you the corrected config JSON you can copy-paste directly.
"Pin @server-filesystem@2.0.0, add --directory ./workspace" → Score goes from 45 to 85.
Know If You'll Be Allowed
Every scan predicts your score after fixes. You know upfront: apply these 3 changes → connection ALLOWED.
No guessing. Clear pass/fail with predicted outcomes.
Runtime Protection (Optional)
Route MCP traffic through our proxy. We block rug-pulls, token leaks, and injection attacks in real-time.
Adds ~200ms. Blocks CRITICAL threats. Monitors tool drift with 15-min watchdog.
Security built for MCP developers
Everything you need to audit, monitor, and protect your MCP server configurations.
Start free. Scale as you grow.
No credit card required. Upgrade when your team needs runtime protection.
- Pre-connect security scan
- OWASP MCP Top 10 checks
- CVE matching (26+ known vulns)
- Remediation config output
- 1 API key
- Everything in Free, plus:
- Runtime proxy gateway
- Rug-pull detection
- Session watchdog (15-min)
- Block mode enforcement
- NSA CSI compliance report
- MCPGuardian as MCP tool
- Email alerts
- Everything in Developer, plus:
- Cross-server risk analysis
- MITRE ATLAS mapping
- Forensic timeline
- Slack + webhook alerts
- Shared dashboards
- 1-year retention
- Everything in Team, plus:
- Policy engine
- Custom scan schedules
- Priority support
- Basic SSO (Google/GitHub)
- 2-year retention
- Everything in Startup, plus:
- Full SSO (SAML/OIDC)
- OpenTelemetry export
- Dedicated support + SLA
- Custom integrations
- On-premise deployment