ScanLabsAI Security Scanner
warningsscanlabsai.com
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
https://scanlabsai.com/api/mcpWebsiteNo authMCP 2025-06-18v1.0.0last checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 729 msHow to authenticate
Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | No auth |
|---|---|
| Protected-resource metadata | ✕Not found Without it a client has to guess where the authorization server lives. |
| Anonymous access | Handshake succeeds; 8 tools listable |
| Credentials demanded in prose | ✕scan_agent, compliance_report, check_credits, buy_credits These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error. |
What the probe found
4 of the 8 tools listed anonymously say in their own descriptions that they need an account or a key (scan_agent, compliance_report, check_credits, buy_credits), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.
Tools
Contract history
Get alerted when this contract changes
Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.
Prefer a feed reader? This page's contract changes are also an Atom feed.
Status badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/scanlabsai-security-scanner)Own this server?
Sign in to claim this listing by proving control of the endpoint.