willianpinho/mcp-gateway-scan

What it does

mcp-gateway-scan is a Model Context Protocol (MCP) server that provides automated security scanning capabilities for production environments. It analyzes repositories and infrastructure across seven critical security dimensions: Role-Based Access Control (RBAC), fail-closed mechanisms, supply chain security, observability, cost controls, secrets management, and overall production readiness. The tool operates in read-only mode, meaning it never executes code or accesses private credentials during scanning.

How to set up

As an MCP server, installation involves: 1) Cloning or installing the mcp-gateway-scan server from the GitHub repository, 2) Configuring the MCP connection parameters for your gateway, 3) Registering the scan_gateway tool with your MCP client, 4) Running the server to enable remote scanning capabilities. Detailed setup instructions are available in the project's GitHub repository.

Key features

• 7-dimensional security scoring system (RBAC, failclosed, supply chain, observability, cost, secrets, prodreadiness)
• Read-only scanning mode - no code execution or credential access
• Production readiness assessment
• Automated gateway security auditing
• MCP server integration for seamless tool usage
• Repository-wide security analysis