MCP security scanner.

HTTPS · auth enforcement · prompt-injection heuristics · supply-chain · DocsGPT-class downgrade · CVE fingerprints

🔒 The scanner runs from the Cloudflare edge (not your browser). The target URL + any Bearer token are sent to /api/mcp-scan and not persisted.