The MCP Scanner is a developer security tool designed to audit AI agent infrastructure built on the Model Context Protocol. It combines three scanning engines—YARA rules for static pattern matching, LLM-as-judge for behavioral analysis, and Cisco AI Defense for deep inspection—to identify potentially malicious or vulnerable MCP tools. The tool can be run as a standalone CLI or REST API server, and also includes dependency vulnerability scanning for Python packages.