Scanning MCP Tools for Security Issues Before Your Team Deploys Them

说明与用途

在部署前扫描 MCP 工具发现嵌入的凭证和未记录的网络调用，防止数据泄露。

问题

A teammate pulled a community MCP server from a registry that shipped a hardcoded credential and made unexpected outbound calls, exposing sensitive data and creating hidden network paths.

结果

The pre-deploy scan identified a hardcoded credential and undocumented outbound call, preventing a potential security incident.

工作流

• Pull MCP tool from registry
• Run provenance check (author, source, pinned version)
• Scan for embedded credentials
• Enumerate network hosts the tool contacts
• Verify credential scopes and injection method
• Validate input schema to prevent unsanitized commands
• Mount tool in isolated sandbox with throwaway credential and restricted network
• Log all runtime calls and compare to documented surface
• Promote to shared gateway only if sandbox behavior matches documentation
• Re-scan on every version update to enforce least privilege

证据

A teammate pulled a community MCP server from a registry to speed up a workflow. It worked immediately, which was the problem. On inspection it shipped a hardcoded credential and made outbound calls to a host unrelated to the documented feature.

来源

Run a repeatable scan before it reaches the team: confirm the provenance and version, check what permissions and network access it actually uses, and verify secrets are injected by the gateway rather than bundled in.

来源

A green scan is not a one-time event; wire it into the pipeline so a later update cannot quietly widen the tool's access.

来源