Scanning MCP Tools for Security Issues Before Your Team Deploys Them

Описание и применение

Проверка MCP‑инструментов перед развертыванием выявила встроенный ключ и несанкционированные сетевые вызовы, предотвращая утечку данных.

Задача

A teammate pulled a community MCP server from a registry that shipped a hardcoded credential and made unexpected outbound calls, exposing sensitive data and creating hidden network paths.

Результат

The pre-deploy scan identified a hardcoded credential and undocumented outbound call, preventing a potential security incident.

Рабочий процесс

• Pull MCP tool from registry
• Run provenance check (author, source, pinned version)
• Scan for embedded credentials
• Enumerate network hosts the tool contacts
• Verify credential scopes and injection method
• Validate input schema to prevent unsanitized commands
• Mount tool in isolated sandbox with throwaway credential and restricted network
• Log all runtime calls and compare to documented surface
• Promote to shared gateway only if sandbox behavior matches documentation
• Re-scan on every version update to enforce least privilege

Доказательства

A teammate pulled a community MCP server from a registry to speed up a workflow. It worked immediately, which was the problem. On inspection it shipped a hardcoded credential and made outbound calls to a host unrelated to the documented feature.

Источник

Run a repeatable scan before it reaches the team: confirm the provenance and version, check what permissions and network access it actually uses, and verify secrets are injected by the gateway rather than bundled in.

Источник

A green scan is not a one-time event; wire it into the pipeline so a later update cannot quietly widen the tool's access.

Источник