ramparts

概述

Ramparts 是一个专门为 Model Context Protocol (MCP) 生态系统设计的专业安全扫描器。它通过分析 MCP 服务器在多种传输协议上的功能来识别漏洞。扫描器结合静态分析和 YARA 检查以及 AI 驱动的检测，以评估潜在的安全风险。它提供按严重程度分类的可操作建议，使其适用于开发环境和生产部署。

试试问 AI

装完之后，这里有 3 个你可以让 AI 做的事：

• scan

  Scans an MCP server for security vulnerabilities

  试试:Scan the GitHub Copilot MCP server for security issues试试:Perform a security assessment of this MCP server: https://example.com/mcp/
• scan-config

  Scans IDE MCP configurations for security vulnerabilities

  试试:Scan my IDE MCP configurations for security issues试试:Check the security of my Cursor MCP servers
• mcp-stdio

  Runs Ramparts as an MCP server over stdio

  试试:Start Ramparts as an MCP server试试:Run Ramparts in stdio mode for Docker

说明：Inferred tool names from CLI commands in the README. The server primarily acts as a scanner rather than exposing MCP tools itself.

可对比工具

安装

cargo install ramparts

ramparts scan https://api.githubcopilot.com/mcp/ --auth-headers "Authorization: Bearer $TOKEN"

ramparts mcp-stdio

ramparts 对比