ramparts 0.6.8

A CLI tool for scanning Model Context Protocol (MCP) servers
ramparts-0.6.8 is not a library.

Ramparts: mcp (model context protocol) scanner

A fast, lightweight security scanner for Model Context Protocol (MCP) servers with built-in vulnerability detection.

Crates.io GitHub stars License Rust Tests Clippy Release

Overview

Ramparts is a scanner designed for the Model Context Protocol (MCP) ecosystem. As AI agents and LLMs increasingly rely on external tools and resources through MCP servers, ensuring the security of these connections has become critical.

The Model Context Protocol (MCP) is an open standard that enables AI assistants to securely connect to external data sources and tools. It allows AI agents to access databases, file systems, and APIs through toolcalling to retrieve real-time information and interact with external or internal services.

Ramparts is under active development. Read our launch blog.

The Security Challenge

MCP servers expose powerful capabilities—file systems, databases, APIs, and system commands—that can become attack vectors like tool poisoning, command injection, and data exfiltration without proper security analysis. - 📚 Security Features & Attack Vectors

What Ramparts Does

Ramparts provides security scanning of MCP servers by:

  1. Discovering Capabilities: Scans all MCP endpoints to identify available tools, resources, and prompts
  2. Static Analysis: Performs yara-based checks for common vulnerabilities
  3. Cross-Origin Analysis: Detects when tools span multiple domains, which could enable context hijacking or injection attacks
  4. LLM-Powered Analysis: Uses AI models to detect sophisticated security issues
  5. Risk Assessment: Categorizes findings by severity and provides actionable recommendations

💡 Jump directly to detailed Rampart features? 📚 Detailed Features

Who Ramparts is For

  • Developers: Scan MCP servers for vulnerabilities in your development environment (Cursor, Windsurf, Claude Code) or production deployments.
  • MCP users: Scan third-party servers before connecting, validate local servers before production.
  • MCP developers: Ensure your tools, resources, and prompts don't expose vulnerabilities to AI agents.

Use Cases

  • Security Audits: Comprehensive assessment of MCP server security posture
  • Development: Testing MCP servers during development and testing phases
  • CI/CD Integration: Automated security scanning in deployment pipelines
  • Compliance: Meeting security requirements for AI agent deployments

💡 Caution: Ramparts analyzes MCP server metadata and static configurations. For comprehensive security, combine with runtime MCP guardrails and adopt a layered security approach. The MCP threat landscape is rapidly evolving, and rampart is not perfect and inaccuracies are inevitable.

Quick Start

Installation

cargo install ramparts

Scan an MCP server

ramparts scan https://api.githubcopilot.com/mcp/ --auth-headers "Authorization: Bearer $TOKEN"

# Generate detailed markdown report (scan_YYYYMMDD_HHMMSS.md)
ramparts scan https://api.githubcopilot.com/mcp/ --auth-headers "Authorization: Bearer $TOKEN" --report

Scan your IDE's MCP configurations

# Automatically discovers and scans MCP servers from Cursor, Windsurf, VS Code, Claude Desktop, Claude Code
ramparts scan-config

# With detailed report generation
ramparts scan-config --report

💡 Did you know you can start Ramparts as a server? Run ramparts server to get a REST API for continuous monitoring and CI/CD integration. See 📚 Ramparts Server Mode

Example Output

Single server scan:

ramparts scan https://api.githubcopilot.com/mcp/ --auth-headers "Authorization: Bearer $TOKEN"

RAMPARTS
MCP Security Scanner

Version: 0.6.7
Current Time: 2025-08-04 07:32:19 UTC
Git Commit: 9d0c37c

🌐 GitHub Copilot MCP Server
  ✅ All tools passed security checks

  └── push_files passed
  └── create_or_update_file warning
      📋 Analysis: Standard GitHub file creation/update functionality
      ├── HIGH: Tool allowing directory traversal attacks: Potential Path Traversal Vulnerability
      │   Details: The tool accepts a 'path' parameter without proper validation, allowing potential path traversal attacks.

YARA Scan Results
================================================================================
⚠️ PRE-SCAN - WARNING
  Context: Pre-scan completed: 5 rules executed on 83 items
  Items scanned: 83
  Security matches: 2
  Rules executed: secrets_leakage:*, command_injection:*, path_traversal:*, sql_injection:*, cross_origin_escalation:*
  Security issues detected: secrets_leakage:EnvironmentVariableLeakage

🔍 Detailed Results:
⚠️ get_secret_scanning_alert (tool)
  Rule: EnvironmentVariableLeakage (MEDIUM)
  Context: Sensitive environment variable pattern detected in tool

⚠️ list_secret_scanning_alerts (tool)  
  Rule: EnvironmentVariableLeakage (MEDIUM)
  Context: Sensitive environment variable pattern detected in tool

Summary:
  • Tools scanned: 83
  • Security matches: 2 medium-severity findings
================================================================================

IDE configuration scan:

ramparts scan-config --report

🔍 Found 3 IDE config files:
  ✓ vscode IDE: /Users/user/.vscode/mcp.json
  ✓ claude IDE: /Users/user/Library/Application Support/Claude/claude_desktop_config.json
  ✓ cursor IDE: /Users/user/.cursor/mcp.json

📁 vscode IDE config: /Users/user/.vscode/mcp.json (2 servers)
  └─ github-copilot [HTTP]: https://api.githubcopilot.com/mcp/
  └─ local-tools [STDIO]: stdio:python[local-mcp-server]

🌍 MCP Servers Security Scan Summary
────────────────────────────────────────────────────────────
📊 Scan Summary:
  • Servers: 2 total (2 ✅ successful, 0 ❌ failed)
  • Resources: 81 tools, 0 resources, 2 prompts
  • Security: ✅ All servers passed security checks

📄 Detailed report generated: scan_20250804_073225.md

Contributing

We welcome contributions to Ramparts mcp scan. If you have suggestions, bug reports, or feature requests, please open an issue on our GitHub repository.

Documentation

Additional Resources