MCP Server Scanner
Summary: PortSwigger released a Burp Suite extension, version 0.1.0 by Peter Hendy, that targets Model Context Protocol servers by automating discovery of their tools, resources, resource templates, and prompts. It then builds JSON-RPC 2.0 requests with fuzzable insertion points for active and passive scanning, and was last updated 30 June 2026.
What's compelling: MCP servers expose tools and resources to AI agents, and this extension turns that surface into fuzzable JSON-RPC requests - a signal that the protocol layer connecting agents to your systems is now something scanners can probe directly.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026