Skip to content

Add multi-language MCP source scanning #56

Open
Open
Add multi-language MCP source scanning#56
Labels
area: runtimeRuntime and sandbox analysisroadmapPlanned on the public release roadmapstatus: readyDependencies are complete and work is ready to startversion: 1.1Planned for v1.1.0
Milestone
v1.1.0

Description

@CoderSufiyan
CoderSufiyan
opened on Jul 25, 2026

Extend static source inspection beyond JavaScript and TypeScript.

Acceptance criteria:

  • Add Python, Go, Rust, Java, and shell-script coverage incrementally
  • Detect MCP server entrypoints and dangerous sinks
  • Report language, file, line, and rule ID
  • Avoid scanning unrelated repository code by default
  • Add safe and risky fixtures per language

Depends on: #20 and #28

Milestone: 1.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: runtimeRuntime and sandbox analysisroadmapPlanned on the public release roadmapstatus: readyDependencies are complete and work is ready to startversion: 1.1Planned for v1.1.0

    Projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions