project

shadow-mcp-scanner

An open-source scanner that identifies Model Context Protocol servers by protocol handshake and reports the authentication posture and tool inventory each one exposes to an unauthenticated caller.

Known aliases

themsquared/shadow-mcp-scanner

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

An MCP server answers one unauthenticated initialize POST with its name and version

The only public count of internet-exposed MCP servers is fourteen months old, so a new open-source scanner fingerprints them by protocol handshake and reports which ones answer a caller holding no credentials.

Publishers:dev.to

Reality

Evidence46
Adoption20
Hype gap+15
Incentives55
Confidence47