Technology Radar
Published : Nov 05, 2025
NOT ON THE CURRENT EDITION
This blip is not on the current edition of the Radar. If it was on one of the last few editions, it is likely that it is still relevant. If the blip is older, it might no longer be relevant and our assessment might be different today. Unfortunately, we simply don't have the bandwidth to continuously review blips from previous editions of the Radar.
Understand more
Nov 2025
Assess
MCP-Scan 是一种为 Model Context Protocol (MCP) 服务器设计的安全扫描器，拥有扫描和代理两种运行模式。在扫描模式下，它分析配置和工具描述以检测已知漏洞，例如提示词注入、工具投毒 和 有害流分析。在代理模式下，MCP-Scan 作为智能体系统与 MCP 服务器之间的桥梁，持续监控运行时流量，并可强制执行自定义安全规则和防护措施，包括工具调用校验、敏感信息检测和数据流约束。该工具为智能体系统提供了主动型安全防线，即使恶意提示被接受，也能确保智能体无法执行有害操作。MCP-Scan 是为新兴的智能体系统安全领域量身打造的解决方案。
