mcp-checkpoint

<p align="center" style="margin-bottom: 0; line-height: 0;"> </p> <h3 align="center" margin-top: -20px; margin-bottom: 70px;> MCP Checkpoint </h3>

<br>

MCP Checkpoint is a comprehensive security scanner for Model Context Protocol (MCP). Automatically discovers, analyzes, and secures MCP servers integrated with all major Agentic IDEs, Agents and Clients.

<br>

• 🔍 Auto-Discovery: Finds known MCP configurations for popular Agentic IDEs like Cursor, Windsurf, VS Code, Claude Desktop, and more
• 🔧 Tool, Resource & Prompt Inventory: Connects to MCP servers and catalogs available tools, resources, and prompt templates
• 🛡️ Security Analysis: Specialized security checks including Prompt Injection, Rug Pull Attack, Cross-server Tool Shadowing, Tool Poisoning, Tool Name Ambiguity, and more..
• 🧭 Baseline Drift Detection: Captures approved MCP components and detects rug pulls attacks
• 📊 Comprehensive Reporting: Generates JSON and Markdown reports with actionable findings
• 📜 Audit Trail: Timestamped baselines and reports for full traceability of changes and findings

pip install mcp-checkpoint

# Scan all configurations with security analysis (auto-detects baseline.json if present)
mcp-checkpoint scan

# Inspect configurations and generate baseline (defaults to baseline.json)
mcp-checkpoint inspect

# Use custom configuration file
mcp-checkpoint scan --config /path/to/config.json

# Scan multiple configuration files
 mcp-checkpoint scan \
   --config /path/to/cursor.mcp.json \
   --config /path/to/vscode.mcp.json

# Use custom baseline file path
mcp-checkpoint inspect --baseline /path/to/my-baseline.j