XploitScan

io.github.bgage72590Published by GitHub account bgage72590v1.9.3Updated Oct 29, 2026

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

The publisher's own server: scan.mx Email Diagnostics

VerifiedSTDIODesktop onlySecurity & Monitoring

Server details

Identifier: io.github.bgage72590/xploitscan-mcp
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 23, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account bgage72590 for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.bgage72590%2Fxploitscan-mcp.svg)](https://sourceweft.com/mcp/io.github.bgage72590%2Fxploitscan-mcp?utm_source=readme&utm_medium=badge)

Overview

XploitScan's local MCP server; no sign-in required; STDIO.

No AI overview yet: these facts come from the registry entry and the server itself.

Installation

In SourceWeft

Open XploitScan in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v1.9.3LatestOct 29, 2026
v1.9.2Oct 22, 2026
v1.9.1Oct 12, 2026
v1.9.0Oct 10, 2026
v1.8.0Oct 9, 2026
v1.7.0Oct 4, 2026
v1.6.2Oct 2, 2026
v1.5.2Sep 23, 2026

Score

25% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
License10 pts
Declare a license in the repository or the registry entry.

Other Scan integrations

scan.mx Email Diagnostics

mx.scanOfficial publisher

Remote MCP server that lets an assistant run graded email deliverability and DNS checks on a domain, covering MX, SPF, DKIM, DMARC, blacklists and more.

Streamable HTTPWeb executable

Developer Tools9 toolsOct 25, 2026

MTG Trade Scan

fr.mtg-trade

Scans Magic: The Gathering binder photos, turning uploaded page images into processed scan jobs, with free daily pages and paid credits.

Streamable HTTPWeb executable

Business & Commerce5 toolsNov 6, 2026

mcp-guard

Published by GitHub account diegoperezg7

Security scanner for MCP servers that checks tool lists for poisoning, shadowing, excessive permissions, leaked secrets and weak transports.

STDIODesktop only

Developer Tools4 toolsNov 4, 2026

PredictionScan

Published by GitHub account JordanKarst

Derived prediction-market flow, price changes, trader research and news. 11 read-only tools.

Streamable HTTPWeb executable

11 toolsNov 3, 2026

x402-sec-scan

Published by GitHub account 6mickswagger9

Local stdio MCP server exposing an x402 paid API for AI agents, settling payments in USDC on Base through a CDP facilitator.

STDIODesktop only

AI & MLNot validated · the server did not answer in timeOct 31, 2026