mcpField
H
Hares — MCP security scanner

Hares — MCP security scanner

Local
github.comSecurity
RepositoryVisit website

About Hares — MCP security scanner

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "alialrikabi313-hares": {
      "command": "npx",
      "args": [
        "-y",
        "@alihashim313/hares"
      ]
    }
  }
}
Run commandnpx -y @alihashim313/hares

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@alihashim313/hares0.1.0

Tools

4

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
langenumNoLanguage for all human-readable text in the result.en | ar
pathstringYesWhat to scan: a local directory path, `npm:<package>` (optionally `npm:pkg@version`), or `gh:<owner>/<repo>` (optionally `gh:owner/repo@ref`). Remote targets are downloaded and analyzed statically; no install script is ever executed.
sandboxbooleanNoRun layer 4, which EXECUTES the scanned server inside a Docker container to observe its behavior. Off by default. Only enable with the user's explicit consent, and only when Docker is available.
verbosebooleanNoReturn every finding with its full explanation and remediation. Off by default because the compact form is far cheaper in context.
max_findingsintegerNoMaximum findings to return. The full count is always reported separately.
disabled_rulesarrayNoRule ids to suppress, e.g. ['HARES-L2-EXEC-001']. Suppressed rules are removed from the result, not downgraded.

Details

The maintainer has not added details yet. Check the README in the repository.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.