MCPSentinel MCP Server

Name: MCPSentinel MCP Server
Author: io.github.gentaArnezzi

io.github.gentaArnezzi/mcpsentinel

Repository Registry

What is the MCPSentinel MCP server?

Precision-first security scanning for Model Context Protocol servers.

How to install MCPSentinel

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

MCPSENTINEL_ALLOWED_HOSTS
required
Comma-separated MCP server hostnames, optionally with an exact port, that the MCP-native scanner may connect to.
MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS
Set to true only to permit an explicitly allowlisted private or reserved HTTP address in a trusted local network.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcpsentinel": {
      "command": "uvx",
      "args": [
        "mcp-guardian-scan"
      ],
      "env": {
        "MCPSENTINEL_ALLOWED_HOSTS": "<YOUR_MCPSENTINEL_ALLOWED_HOSTS>",
        "MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<YOUR_MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "mcpsentinel": {
      "command": "uvx",
      "args": [
        "mcp-guardian-scan"
      ],
      "env": {
        "MCPSENTINEL_ALLOWED_HOSTS": "<YOUR_MCPSENTINEL_ALLOWED_HOSTS>",
        "MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<YOUR_MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcpsentinel": {
      "command": "uvx",
      "args": [
        "mcp-guardian-scan"
      ],
      "env": {
        "MCPSENTINEL_ALLOWED_HOSTS": "<YOUR_MCPSENTINEL_ALLOWED_HOSTS>",
        "MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<YOUR_MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "mcpsentinel": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "mcp-guardian-scan"
      ],
      "env": {
        "MCPSENTINEL_ALLOWED_HOSTS": "<YOUR_MCPSENTINEL_ALLOWED_HOSTS>",
        "MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS": "<YOUR_MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS>"
      }
    }
  }
}

Claude Code

claude mcp add mcpsentinel --env MCPSENTINEL_ALLOWED_HOSTS=<YOUR_MCPSENTINEL_ALLOWED_HOSTS> --env MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS=<YOUR_MCPSENTINEL_ALLOW_PRIVATE_HTTP_TARGETS> -- uvx mcp-guardian-scan