# Apisecurityscan Securityscan MCP server

Source: https://glimind.com/server/mcp-registry%2Fnet.apisecurityscan%2Fsecurityscan
Registry id: `mcp-registry/net.apisecurityscan/securityscan`
Status: live (checked 2026-10-27T02:17:14.117Z)

## Verdict

Apisecurityscan Securityscan MCP server answered 99.89% of Glimind's liveness checks over 30 days, better than 28% of MCP servers, with 1381 ms median handshake and 1 outage in 90 days. Its agent-readiness grade is A (90/100) across 8 tools, costing an agent about 1,637 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 99.89% | 28% of MCP servers |
| Median handshake latency | 1381 ms | 11% of MCP servers |
| p95 handshake latency | 3879 ms | — |
| Checks in 30 days | 4,926 | — |
| Outages, 90 days | 1 | — |
| Median recovery | 27 min | — |
| Agent-readiness score | 90/100 (A) | 69% of MCP servers |
| Tools | 8 | — |
| Tool-list size for an agent | ~1,637 tokens | 56% of MCP servers |
| Days observed | 29 | — |

## Install

```json
{
  "mcpServers": {
    "apisecurityscan-securityscan-mcp-server": {
      "type": "http",
      "url": "https://apisecurityscan.net/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http apisecurityscan-securityscan-mcp-server https://apisecurityscan.net/mcp
```

## Tools (8)

- `audit_mcp_server_config`: Audit an MCP client configuration for security risks — works offline, no external service required. Detects: tool poisoning, hidden/coercive instructions in too
- `check_dependencies`: Check the health of your agent's external dependencies: uptime, SSL validity, blacklist status, and a trust score 0-100 (DepScan).
- `full_stack_audit`: Complete security posture in one call: audits the MCP config, checks dependency health, analyzes an untrusted skill, scans the local network gateway, and scans 
- `network_scan`: Active security scan of a device or host with an autonomous AI agent that decides which follow-up probes to run (ActiveScanner). Only scan targets you own or ha
- `scan_secrets`: Scan a text payload (a prompt, an outbound API body, a file's contents) for secrets and PII BEFORE it leaves for an LLM or external API, and return a redacted c
- `scan_skill`: Analyze an AI agent skill for prompt injection, malware patterns, and OWASP LLM Top 10 issues BEFORE installing it (SecurityScan).
- `securityscan_checkout`: Start a Stripe checkout to buy a SecurityScan tier (agent-native sales). Returns a payment URL to hand to your user AND a PENDING API key that activates automat
- `securityscan_pricing`: SecurityScan catalog: tiers, prices, quotas and the evidence behind the product — the fact sheet an agent needs to evaluate or recommend a purchase to its user.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.