gorgon-scout
io.github.Gorgon-Cyber/gorgon-scout
About gorgon-scout
gorgon-scout is an MCP server published by the GitHub account Gorgon-Cyber. Run AI-driven web-app and API security scans (DAST) from Claude or any MCP agent. Windows.
It runs on your own machine: your AI client starts it from the MCP bundle package gorgon-scout.mcpb at version 1.0.38.
It asks for no keys or passwords.
Version 1.0.38 was published on 7 August 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on registry metadata: 4 pass, 0 warn, 0 fail, 3 info. How we check.
What it asks for
This server declares no environment variables, so it asks for no keys or settings.
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/Gorgon-Cyber/gorgon-scout-mcp |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for no secrets |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account Gorgon-Cyber |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Info | Package could not be read (too large) |
Popularity & health: 41 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 0 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.Gorgon-Cyber/gorgon-scout |
|---|---|
| Publisher | GitHub account Gorgon-Cyber |
| How the name is verified | Name verified via GitHub account Gorgon-Cyber. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/Gorgon-Cyber/gorgon-scout-mcp/releases/download/v1.0.38/gorgon-scout.mcpb 1.0.38 (stdio) |
| Version | 1.0.38 |
| Published | |
| Last updated | |
| Source repository | https://github.com/Gorgon-Cyber/gorgon-scout-mcp |
| Website | https://gorgoncyber.com/scout |
| Category | Security (assigned by keyword rule, not by hand) |
Related servers in Security
Draugr4/4Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST,…- SafeWeave8/8Security scanner for AI-written code: SAST, secrets, dependencies,…
- mythos-agent6/7Open-source AI security agent: SAST, DAST, and policy-as-code over…
- Scout Security7/7Deterministic, zero-token security scanner your AI agent calls to…
Snyk API & Web MCP Server7/7MCP server for Snyk API & Web — DAST scanning, findings management,…- raven-nest-mcp4/4AI-driven penetration testing - 22 security tools behind…