Prism Scanner MCP Server

Security scanner for AI Agent skills, plugins, and MCP servers. Prism analyzes code for malicious behavior before you install it - and checks your system for leftover threats after you uninstall. It runs locally over stdio via the published package.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-04-07 · ★ 13 · #113 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Prism Scanner

Claude Code

claude mcp add aidongise-cell-prism-scanner -- uvx prism-scanner

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "aidongise-cell-prism-scanner": {
      "command": "uvx",
      "args": [
        "prism-scanner"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package prism-scanner - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.aidongise-cell is GitHub-verified and matches the repo owner

03 · What Prism Scanner can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.2.2 · 2026-04-07

What's fixed · prism --version now correctly reports Prism Scanner v0.2.2. The v0.2.1 release shipped with cli.py still hardcoding VERSION = "0.1.3", causing a confusing version mismatch after pip install -U…

v0.2.1 · 2026-04-04

Systematic false positive reduction validated against real ClawHub skills. This is a quality-only release - no new detection rules, only existing rules made more accurate. · Key Improvements · | Fix | Before | After |…

v0.1.0 · 2026-03-22

Prism Scanner v0.1.0 · Security scanner for AI Agent skills, plugins, and MCP servers. · Highlights · 39 detection rules across 3 analysis layers: · - Code Behavior (S1-S14): Shell execution, data exfiltration, SSRF…

04 · Who maintains Prism Scanner

Prism Scanner is maintained by aidongise-cell. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

repository: github.com/aidongise-cell/prism-scanner
category: security - ranked #113 of 182 actively-maintained security servers as of 2026-08-25.
registry: io.github.aidongise-cell/prism-scanner (active, first published 2026-03-18)
packages: pypi:prism-scanner

06 · Prism Scanner FAQ

What is Prism Scanner?

Is Prism Scanner still maintained?

Yes - as of 2026-08-25, its last commit was 2026-04-07. We re-verify nightly.

How do I install Prism Scanner?

Run `uvx prism-scanner`. You can also paste the ready-made client config above.

Does Prism Scanner run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Prism Scanner

Alternatives to Prism Scanner

Maintained security servers if Prism Scanner isn't the fit.

Pairs well with

Servers that cover what Prism Scanner doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · AIGEN - Open Bounty Protocol for AI Agents · Healthclaw Guardrails · Linkedctl · Scope Gate · npm MCP

More Python MCP servers · Aidress · Cathedral - Persistent Memory for AI Agents · Rigol DHO824 Oscilloscope · AION Indian Market Intelligence for Macro Event & Sector Impact Analysis · see all