Meok Mcp Injection Scan Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.14Updated Oct 30, 2026

MCP injection / prompt-poisoning / SSRF scanner. 30+ canonical rules covering the April 2026

The publisher's own server: scan.mx Email Diagnostics

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that scans MCP configurations for injection, prompt-poisoning and SSRF risks using 30+ detection rules.

What you can do
  • Scan MCP setups for injection, prompt-poisoning and SSRF issues
  • Apply 30+ canonical detection rules across five severity tiers
  • Report findings tied to the April 2026 Anthropic MCP RCE class
  • No individual tools are listed in the manifest, so exact operations are not documented.
When to use it
Worth considering when you want an assistant to check MCP servers or configurations for prompt-injection and SSRF weaknesses before or after installing them.
Requirements
Runs as a local process over stdio, installed from the PyPI package meok-mcp-injection-scan-mcp and started with Python. No authentication, environment variables or headers are declared. Desktop client only.
Before you install
The README is largely marketing: it advertises paid Pro ($99/mo) and Enterprise ($499/mo) tiers, compliance claims and sales links, while tool behavior is undocumented. Review what it reads and sends before running it on real configurations.

Installation

In SourceWeft

  1. Open Meok Mcp Injection Scan Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Meok MCP Injection Scan MCP

[MEOK AI Labs] [EU AI Act] [License] [PyPI]

MCP injection-scanner — 30+ canonical detection rules across 5 severity tiers for the April 2026 ...

MCP injection-scanner — 30+ canonical detection rules across 5 severity tiers for the April 2026 Anthropic MCP RCE class. By MEOK AI Labs.

🚀 Quick Start

bash
# Install via pippip install meok_mcp_injection_scan_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install meok-mcp-injection-scan-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Source: README.md at commit 1b99130

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.14LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Scan integrations

scan.mx Email Diagnostics

mx.scanOfficial publisher

Remote MCP server that lets an assistant run graded email deliverability and DNS checks on a domain, covering MX, SPF, DKIM, DMARC, blacklists and more.

Streamable HTTPWeb executable
Developer Tools9 toolsOct 25, 2026

MTG Trade Scan

fr.mtg-trade

Scans Magic: The Gathering binder photos, turning uploaded page images into processed scan jobs, with free daily pages and paid credits.

Streamable HTTPWeb executable
Business & Commerce5 toolsNov 6, 2026

mcp-guard

Published by GitHub account diegoperezg7

Security scanner for MCP servers that checks tool lists for poisoning, shadowing, excessive permissions, leaked secrets and weak transports.

STDIODesktop only
Developer Tools4 toolsNov 4, 2026

PredictionScan

Published by GitHub account JordanKarst

Derived prediction-market flow, price changes, trader research and news. 11 read-only tools.

Streamable HTTPWeb executable
11 toolsNov 3, 2026

x402-sec-scan

Published by GitHub account 6mickswagger9

Local stdio MCP server exposing an x402 paid API for AI agents, settling payments in USDC on Base through a CDP facilitator.

STDIODesktop only
FinanceNot validated · the server did not answer in timeOct 31, 2026