This skill as a file
$7 one payment, yours forever
- Download right after checkout, keep it for good
- Paste it into ChatGPT, Claude, Gemini or any AI chat, free plans included
- 30-day money-back guarantee
MCP Security Reviewer
$7.00
Zu den Produktinformationen springen
MCP Security Reviewer
MCP Security Reviewer checks an MCP server or client config before you connect it to Claude.
$7.00
dieser Skill
einmal zahlen
für immer deins
Komplettes Skill-Paket Sofort-Downloadmcp-security-reviewer.md
Unlimited
Or get every skill, not just this one
$9/Monat
Dieser plus 2,500+ weitere, direkt in deiner KI
Dieser Skill$7
Unlimited$9/Monat
Einmal zahlen, für immer behaltenSofort-Download30 Tage Geld-zurück-Garantie
As featured onProduct HuntFazierKittyLaunch
Secure checkout by Shopify
Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
Oder jeden Skill direkt in deiner KI.
Fragen vor dem Kauf? Ein Mensch antwortet, meist am selben Tag: hello@kissmyskills.com
// the file itself
Read it before you buy it.
The first lines of the file your AI will read, exactly as delivered. Nothing rewritten for the page.
Nutze den Namen
Wenn die Datei geladen ist, sprich es mit Namen an: „Serge, sieh dir diese Seite an.“ Dafuer ist der Name da. So bleiben auch mehrere Skills in einem Chat auseinander.
Wenn die Datei geladen ist, sprich es mit Namen an: „Serge, sieh dir diese Seite an.“ Dafuer ist der Name da. So bleiben auch mehrere Skills in einem Chat auseinander.
// der skill, auf dem deine KI laeuft
You are an application security reviewer for MCP servers and client configs who never runs untrusted code. You have been activated to find prompt injection, over-broad scopes and token leaks and to write the fixes.
// two ways to get it
Buy this file, or open the whole library.
Every skill, prompt and agent, inside your chat
$9/mo cancel anytime, or $59 a year
- All 2,500+ files in the library, loaded the moment you ask
- Nothing to download or paste: connect once in Claude, ChatGPT, Claude Code or Cursor
- Works on every Claude plan, free included · 30-day money-back guarantee on the first charge
Subscribers can still buy single files and keep them after they cancel.
What you're actually buying
MCP Security Reviewer checks an MCP server or client config before you connect it to Claude. Give it the server code, the tool definitions and your claude_desktop_config.json or connector settings, and it returns findings by severity with the file and line, the evidence, a short exploit scenario and the fixed code.
Built for developers shipping MCP servers and teams deciding which third-party servers to allow. It looks for prompt injection through tool results and descriptions, tool poisoning and silent description changes, over-broad scopes, token passthrough, tokens in logs or URLs, missing audience checks, SSRF, command injection and path traversal, unauthenticated remote endpoints, local servers exposed on 0.0.0.0, secrets in config files and unpinned packages. It is a static review and never runs an untrusted server; it reviews security rather than designing tools.
Finds the holes an attacker would use before an MCP server gets access to your files, inbox or production API.
Compatible with: MCP TypeScript and Python servers, Cloudflare Workers remote MCP, Claude Desktop and Claude Code configs, Claude.ai connectors and other MCP clients.
- What is MCP tool poisoning? Hidden instructions in a tool description or result that steer the model; the reviewer flags them with the exact text.
- Does it check OAuth? Yes - token audience, scopes, passthrough, storage and redirect handling.
- Can it review a server I did not write? Yes - paste the code or config; it never executes it.
- What do I get at the end? A findings table, a scope matrix per tool, a config review and a fix order.
// installation
Unter 2 Minuten
Vier Schritte. Jeder AI-Chat.
- 01Datei herunterladen
Nach dem Bezahlvorgang wird der Download-Link an deinen Posteingang gesendet. Speichere die Datei an einem beliebigen Ort auf deinem Gerät.
- 02Öffne deinen AI-Chat
Claude, ChatGPT, Gemini, Grok oder Copilot – ganz egal, welches du bereits nutzt.
- 03Fügen Sie den Dateiinhalt ein
Füge es in das System-Prompt-, Projektanweisungen- oder benutzerdefinierte Anweisungsfeld ein.
- 04Beginne mit der Arbeit
Deine AI ist jetzt als Spezialist konfiguriert. Frag sie alles innerhalb ihres Fachgebiets.
Keine technischen Kenntnisse erforderlich.
Mit Unlimited gibt es nichts herunterzuladen. Verbinde deine KI einmal und bitte sie dann um einen beliebigen Skill beim Namen.
Setup-Anleitung → Unlimited · $4.92/Monat bei jährlicher Zahlung →
// faq
Fragen zu diesem Produkt
What does MCP Security Reviewer do?+
It statically reviews MCP server code and client configs and returns findings by severity: prompt injection and tool poisoning, over-broad scopes, token passthrough and leaks, SSRF, command injection, path traversal, missing auth and secrets in config, each with location, evidence, an exploit scenario and a code fix.
What are the main MCP security risks?+
Untrusted text in tool results or descriptions that steers the model, tools with more access than the task needs, tokens passed through or logged, remote endpoints without proper OAuth, local HTTP servers open to the network, and install commands that pull unpinned packages.
Does it check MCP OAuth and token handling?+
Yes. It checks that tokens are issued for your server and validated for audience, that scopes match each tool, that upstream tokens are never passed through, and that tokens never appear in logs, URLs or config files.
Is it the same as an MCP builder or tool-design skill?+
No. Builders write and deploy servers and tool-design skills tune schemas. This skill attacks the design on paper and tells you what to fix before anyone connects it.