Security scanner and install and runtime protection suite for Model Context Protocol (MCP) servers
概览
🚀 Enhanced scanner with improved false-positive detection! The first security tool that uses MCP to secure MCP. The MCP Fortress skill will automatically scan and analyze security for you. No setup, no configuration - just install and ask! 🎉 That's it! The web UI will open at http://localhost:3000 - Vulnerability detection across npm and PyPI packages - CVE database integration - Dependency analysis - Risk scoring (0-100) - Real-time monitoring of MCP servers - Quarantine suspicious packages - WebSocket telemetry streaming - Activity feed with live updates - Achievement system with 16 unlockable badges - Streak tracking for daily scans - Leaderboards and metrics - Humorous security tips - Modern React-based dashboard - Real-time statistics - Server table with sorting and filtering - Detailed threat analysis views - Run MCP Fortress as an MCP server - Expose security analysis tools to Claude Code, Cursor, Windsurf - AI-powered security analysis using your existing LLM - Zero...
README
以下为原文 README 节选，完整内容请查看原文。
🏰 MCP Fortress
Security scanner and runtime protection for Model Context Protocol (MCP) servers
🚀 NEW in v0.3.6: Enhanced scanner with improved false-positive detection! The first security tool that uses MCP to secure MCP.
🚀 Quick Start
For Claude Code Users (Easiest!)
# Install the Claude Code plugin
/plugin marketplace add mcp-fortress/mcp-fortress
/plugin install mcp-fortress
# Authenticate with Smithery (opens in browser)
/mcp
Done! Now ask Claude: “Is @modelcontextprotocol/server-github safe to install?”
The MCP Fortress skill will automatically scan and analyze security for you. No setup, no configuration - just install and ask! 🎉
📖 Full Claude Code Installation Guide
Standalone Installation
# Install globally
npm install -g mcp-fortress
# Start the server
mcp-fortress start
That’s it! The web UI will open at http://localhost:3000
🎬 Demo
✨ Features
🔍 Automated Security Scanning
- Vulnerability detection across npm and PyPI packages
- CVE database integration
- Dependency analysis
- Risk scoring (0-100)
🛡️ Runtime Protection
- Real-time monitoring of MCP servers
- Quarantine suspicious packages
- WebSocket telemetry streaming
- Activity feed with live updates
📊 Gamification
- Achievement system with 16 unlockable badges
- Streak tracking for daily scans
- Leaderboards and metrics
- Humorous security tips
🎨 Beautiful Web UI
- Modern React-based dashboard
- Real-time statistics
- Server table with sorting and filtering
- Detailed threat analysis views
🤖 NEW: MCP Server Mode (v0.3.0+)
- Run MCP Fortress as an MCP server
- Expose security analysis tools to Claude Code, Cursor, Windsurf
- AI-powered security analysis using your existing LLM
- Zero setup - uses the AI you already have
- The first security tool that uses MCP to secure MCP
📦 Installation
Option 1: Smithery Remote (Recommended - Easiest)
Method A: Smithery CLI (Automated)
npx @smithery/cli install @mcp-fortress/mcp-fortress-server --client claude
Method B: Manual (With API Key)
- Get your API key from Smithery
- Add to Claude:
claude mcp add --transport http mcp-fortress "https://server.smithery.ai/@mcp-fortress/mcp-fortress-server/mcp?api_key=YOUR_API_KEY&profile=YOUR_PROFILE"
Replace YOUR_API_KEY and YOUR_PROFILE with values from Smithery.
安装
npx @smithery/cli install @mcp-fortress/mcp-fortress-server --client claude配置
{
"mcpServers": {
"mcp-fortress": {
"command": "mcp-fortress",
"args": ["serve-mcp"]
}
}
}