Lab · Security · MCP
MCP Security Gate + BotShield
Most remote MCP servers ship with weak auth. This scanner scores a public MCP endpoint (initialize + tools/list twice) and BotShield runs a short injection suite against a bot URL you confirm you own.
MCP Security Gate
Read-only. Sends initialize and tools/list (twice) and never calls a tool.
BotShield
Free tier sends 5 fixed injection probes by POST. Your bot's replies are checked for leaked prompt markers, tool schemas, secrets and obedience to an injected canary token.
Pricing
Compared to mcp-scan, Promptfoo and Lasso MCP Gateway
This is a hosted heuristic scan, not a gateway and not an eval framework. Sourced prices and who should pick which:
- mcp-scan alternative · MCP Security Gate vs mcp-scan
- Promptfoo MCP alternative
- Lasso MCP Gateway alternative
- All comparisons
Repo: github.com/Rupesh7128/kok-mcp-security-gate.
Prepared by Mayank Raj · Kingdom of Kumar Lab. Classifiers are regex heuristics. Cite OWASP LLM01 and the OWASP MCP cheat sheet; verify Astrix/arXiv links before quoting stats.