Prism Scanner — Claude Code MCP server for security checks
Prism Scanner lets an AI assistant inspect skills, plugins, and MCP servers for threats, then look for agent leftovers on the system. Connect it to run these checks through chat.
claude mcp add prism-scanner -- uvx prism-scannerWhat Prism Scanner does
The MCP server gives the assistant four tools: prism_scan examines code, prism_grade returns a grade, prism_clean_scan searches the system for agent traces, and prism_clean_plan prepares a cleanup plan. Its checks cover behavior such as shell commands and data exfiltration, along with prompt injection and persistence mechanisms.
MCP mode uses the prism-scanner package with the [mcp] extra and starts through prism-mcp. For Claude Code, add it with claude mcp add prism-scanner -- uvx prism-scanner. Review the cleanup plan before applying changes; cleanup is a separate action, not part of the scan.
What it helps with
- inspect a skill before installing it
- find risky shell execution in code
- search the system for agent traces
- prepare a plan to remove detected traces
Example prompts for the agent
- Scan this skill for malicious behavior and explain the findings.
- Grade this MCP server and show me the security issues.
- Search my system for agent traces and prepare a cleanup plan.
How to install Prism Scanner
Platform CLI
claude mcp add prism-scanner -- uvx prism-scanneruvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>
Platform CLI
codex mcp add prism-scanner -- uvx prism-scanneruvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>
Config file
{
"mcpServers": {
"prism-scanner": {
"command": "uvx",
"args": [
"prism-scanner"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>
Config file
{
"servers": {
"prism-scanner": {
"type": "stdio",
"command": "uvx",
"args": [
"prism-scanner"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>
Platform CLI
gemini mcp add prism-scanner uvx prism-scanneruvx runs the command named after the package; if the README names another one, use uvx --from prism-scanner <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Prism Scanner
How do I install Prism Scanner in Claude Code?
Add the server with claude mcp add prism-scanner -- uvx prism-scanner. MCP mode uses the prism-scanner package with the [mcp] extra.
What does Prism Scanner do?
It checks skills, plugins, and MCP servers for security threats. It can also search a system for agent traces and prepare a cleanup plan.
Which MCP tools does Prism Scanner provide?
prism_scan checks code, prism_grade grades it, prism_clean_scan searches for system traces, and prism_clean_plan prepares a cleanup plan.
