Cisco MCP Scanner
Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.
Updated
✨ Try AgentScout's free AI image generator →Good for: connecting tools with MCP, building MCP servers
Use cases
About Cisco MCP Scanner
Cisco MCP Scanner is listed in our security & governance category and is aimed at builders. Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis. Pricing, as the maker states it: Open source. Maturity: Active. We last checked the official link on 2026-10-18.
Cisco MCP Scanner at a glance
- Category: Security & governance
- Built for: Developers and teams building with AI agents
- Pricing: Open source (as the maker states it)
- Licence: Apache License 2.0 (OSI-approved open source)
- GitHub: cisco-ai-defense/mcp-scanner · 1,096 stars (as of Oct 21, 2026)
- Latest release: 4.8.7, Oct 20, 2026
- Last commit: Oct 20, 2026
- Official site: blogs.cisco.com/ai/securing-the-ai-agent-supply-chain-with-ciscos-open-source-mcp-scanner
- Listed on AgentScout: Oct 18, 2026
Cisco MCP Scanner FAQ
What is Cisco MCP Scanner?
Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.
How much does Cisco MCP Scanner cost?
Cisco MCP Scanner's pricing, as the maker states it: Open source. Open-source tools are free to use, though you may still pay for model API usage or a hosted plan. Check the official site for current plans.
Is Cisco MCP Scanner open source?
Yes. Cisco MCP Scanner's GitHub repository is published under the Apache License 2.0, according to the licence file in the repo.
Where can I find Cisco MCP Scanner's source code?
On GitHub at cisco-ai-defense/mcp-scanner, which had 1,096 stars as of Oct 21, 2026. The latest release is 4.8.7 (Oct 20, 2026).
What are alternatives to Cisco MCP Scanner?
Similar tools include Guardrails AI, AI-Infra-Guard, Snyk Agent Scan, Sonatype MCP, Prophet Security and wren-guard Pro.
Facts from our link-checked listing, the GitHub repository and the official site. See something wrong? Suggest an edit.
Cisco MCP Scanner ratings and reviews
Be the first to rate Cisco MCP Scanner: tap 1 to 5 stars below. A written review is optional.
Cisco MCP Scanner alternatives
Other security & governance tools in our directory. See all security & governance tools →
Guardrails AI
Open-source framework for validating LLM inputs and outputs with configurable guardrails.
AI-Infra-Guard
Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.
Snyk Agent Scan
Snyk's scanner for security risks in MCP servers and agent skills.
Sonatype MCP
Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.
Prophet Security
Agentic AI SOC analyst that triages and investigates alerts.
wren-guard Pro
wren-guard Pro is a TypeScript guard library for AI agents that hold or move funds on Base and other EVM chains (viem, CDP AgentKit, Privy, Eliza and similar stacks). It enforces allowlisted, capped and simulated sends, decodes calldata and signatures to flag unlimited approvals, Permit, Permit2, setApprovalForAll and EIP-7702 delegation, screens for injected instructions and watches nonces. It ships with an 89-scenario attack corpus drawn from public agent wallet incidents and a GitHub Action that fails CI if your agent's policy would let a known attack through. The original Python wren-guard is free and MIT licensed.
Related lists
🏆 See also: Strix alternatives · All best-of lists
Badge for makers
Built Cisco MCP Scanner? Add this badge to your README or site. It links back to this page. About badges
