{
  "markdown": "# mcpcheck\n\nA [webcheck.xyz](https://webcheck.xyz)-style scanner for remote [MCP](https://modelcontextprotocol.io) servers.\n\nEnter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:\n\n- **Connectivity & Handshake** — protocol negotiation, server info, advertised capabilities.\n- **Tools, Resources & Prompts** — full inventory with schemas.\n- **Security Heuristics** — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.\n- **Network & TLS** — certificate validity, HTTP security headers, CORS policy.\n- **License Information** — presence of a LICENSE file or license mention in server instructions.\n\n## Development\n\n```bash\nnpm install\nnpm run dev\n```\n\nOpen [http://localhost:3000](http://localhost:3000) and paste an MCP server URL to scan.\n\n## Notes\n\n- Only `http://` and `https://` targets are accepted; scanning private/internal IP ranges or `localhost` is blocked to prevent SSRF.\n- Security checks are heuristic, not a substitute for a manual security review.\n",
  "bytes": 1123,
  "sha": "6e9e7b5227ad91e92738447345b8cef3608ec248365390d9d908613772f06591",
  "repo_slug": "fpetitit/mcpcheck",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_fpetitit_mcpcheckup_2801d7b3/readme"
}