What can you do with mcpcheckup?

mcpcheck

A webcheck.xyz-style scanner for remote MCP servers.

Enter the URL of an MCP server (Streamable HTTP or SSE transport) and get a dashboard of checks:

Connectivity & Handshake — protocol negotiation, server info, advertised capabilities.
Tools, Resources & Prompts — full inventory with schemas.
Security Heuristics — prompt-injection-style wording in tool descriptions, tools that may expose sensitive capabilities (exec, filesystem, network), missing descriptions, plaintext transport.
Network & TLS — certificate validity, HTTP security headers, CORS policy.
License Information — presence of a LICENSE file or license mention in server instructions.

npm install
npm run dev

Open http://localhost:3000 and paste an MCP server URL to scan.

Only http:// and https:// targets are accepted; scanning private/internal IP ranges or localhost is blocked to prevent SSRF.
Security checks are heuristic, not a substitute for a manual security review.

Add mcpcheckup to your client. Pick the one you use.

claude mcp add --transport http mcpcheckup https://mcpcheckup.xyz/api/mcp

codex mcp add mcpcheckup --url https://mcpcheckup.xyz/api/mcp

{
  "mcpServers": {
    "mcpcheckup": {
      "url": "https://mcpcheckup.xyz/api/mcp"
    }
  }
}

Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.

{
  "servers": {
    "mcpcheckup": {
      "type": "http",
      "url": "https://mcpcheckup.xyz/api/mcp"
    }
  }
}

Add to `.vscode/mcp.json` in your workspace.

{
  "mcpServers": {
    "mcpcheckup": {
      "url": "https://mcpcheckup.xyz/api/mcp"
    }
  }
}

Add to `claude_desktop_config.json`, then restart Claude Desktop.

{
  "mcpServers": {
    "mcpcheckup": {
      "serverUrl": "https://mcpcheckup.xyz/api/mcp"
    }
  }
}

Add to `~/.codeium/windsurf/mcp_config.json`.

39 / 100

Incomplete

Versions	Published
0.1.0Latest	Jun 21, 2026