Skip to content

Add MCP Doctor — security scanner + quality scorer + registry for MCP servers #668

@xlyoung

Description

@xlyoung

MCP Doctor — Security & Quality Toolkit for MCP

🔗 Repo: https://github.com/xlyoung/mcp-doctor
📦 Install: pip install mcp-doctor
🔒 License: MIT

What it does

MCP Doctor is the missing security and quality toolkit for the MCP ecosystem:

  • Security Scan — 8 engines: prompt injection, path traversal, credential leakage, network exfiltration, command injection, SSRF, supply chain, excessive permissions
  • Quality Score — 0-100 automated scoring (security 35%, maintenance 25%, docs 15%, testing 15%, community 10%)
  • Server Comparison — Side-by-side comparison of two MCP servers
  • Curated Registry — 100+ MCP servers with pre-computed scores and 20+ categories
  • One-Command Install — scan + score + install in one step
  • CI/CD Audit — exit codes for pipeline integration, JSON output
pip install mcp-doctor
mcp-doctor scan @modelcontextprotocol/server-filesystem
mcp-doctor list --category database --sort score
mcp-doctor audit @modelcontextprotocol/server-filesystem --threshold 60

Before installing an MCP server, run it through the Doctor! 🩺

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions