What is mcp-gateway-scan?
mcp-gateway-scan is a MCP server by willianpinho that read-only static scanner that scores MCP and agent-gateway repos on RBAC, fail-closed behavior, supply chain, observability, cost and secrets handling. It is listed under Developer tools and has 2 GitHub stars.
| Type | Mcp server |
|---|---|
| Author | willianpinho |
| Repository | willianpinho/mcp-gateway-scan |
| Popularity | 2 GitHub stars |
| Category | Developer tools |
| Security | Low risk (96/100) |
| Rank | #2,837 of 4,418 MCP servers; #603 in Developer tools |
| License | MIT |
| Last commit | 2026-07-15 |
| Runs | Locally |
| Language | TypeScript |
Is mcp-gateway-scan safe to install?
mcp-gateway-scan scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 5 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Community-built server | Note |
| Runs on your machine only | Pass |
| No credentials mentioned | Pass |
| Read-only by description | Pass |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install mcp-gateway-scan?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/willianpinho/mcp-gateway-scan
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add mcp-gateway-scan -- <command from README> claude mcp add --transport http mcp-gateway-scan <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs mcp-gateway-scan for you:
Add the "mcp-gateway-scan" MCP server from https://github.com/willianpinho/mcp-gateway-scan to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.