Hares — MCP security scanner

A local MCP server that runs a multi-layer security scan of MCP servers and agent skills for injection and data-exfiltration risks.

What you can do

Scans MCP servers and agent skills for security problems, described as a multi-layer check covering injection and exfiltration risks. Runs as a local process started with npx and exposes its scanning capability to the assistant over stdio. No individual tools are listed in the manifest, so the exact operations are not documented here.

When to use it

Useful when you want an assistant to vet an MCP server or agent skill before installing or trusting it, for example to check third-party components for prompt-injection or data-exfiltration patterns.

Requirements

Runs locally as a process on the user's machine via npx from the npm package @alihashim313/hares, so Node.js and npm are needed. Desktop only; no web execution. No authentication, environment variables or headers are declared.