MCP server

Heimdall

io.github.caglarbozkurt/heimdall

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Scan an MCP server or agent config for injection, exfiltration, and risky capabilities.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add heimdall -- npx -y mcp-heimdall-scan@0.5.1

Claude Desktop

{"mcpServers":{"heimdall":{"command":"npx","args":["-y","mcp-heimdall-scan@0.5.1"]}}}

Codex (config.toml)

[mcp_servers.heimdall]
command = "npx"
args = ["-y","mcp-heimdall-scan@0.5.1"]

Gemini CLI

{"mcpServers":{"heimdall":{"command":"npx","args":["-y","mcp-heimdall-scan@0.5.1"]}}}

Cursor

{"mcpServers":{"heimdall":{"command":"npx","args":["-y","mcp-heimdall-scan@0.5.1"]}}}

VS Code

{"servers":{"heimdall":{"type":"stdio","command":"npx","args":["-y","mcp-heimdall-scan@0.5.1"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

AgentAegis
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Tech Risk
MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data
Prompt Injection Scanner
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
Moltline Agent Governance
Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
MYCELIX
Free, no-key, read-only MCP endpoint verification and diagnostics.
ScorpTech x402 API
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
Skill Audit
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
X402 Endpoints
x402 paid API tools for AI agents on Base: EU/global registries, crypto, wallet & agent trust.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.caglarbozkurt/heimdall.svg)](https://aptlynx.net/servers/io.github.caglarbozkurt/heimdall)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents