Hares — MCP security scanner

Overview

Hares is a multi-layer security scanner for MCP servers and agent skills, designed to detect injection attacks and exfiltration vulnerabilities. It analyzes MCP implementations and skill definitions to identify potential security weaknesses before they reach production.

The scanner runs locally on your machine via the npm package @alihashim313/hares, which communicates with your MCP client over stdio. No authentication is needed—it works immediately after installation. Version v0.1.0 is available under the MIT license, with full source code hosted at alialrikabi313/hares on GitHub.

Hares appears in the Security category on mcp.site and integrates with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and other MCP clients. If you maintain this project, claim your listing to earn the Verified badge and ensure the information stays accurate.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "hares_mcp_security_scanner": {
      "command": "npx",
      "args": [
        "-y",
        "@alihashim313/hares"
      ]
    }
  }
}