Gorgon Scout Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gorgon Scout Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run AI-driven web-application and API security scans from Claude, or any MCP agent.
Gorgon Scout is a Windows application security scanner (DAST). This is its Model Context Protocol (MCP) server, which lets your AI assistant drive the whole workflow in plain language: ask it to scan a web app or API you are authorised to test, and it records the target, runs the scan, streams progress and findings, and produces a Word report with optional AI analysis.
Works with the free plan of Claude Desktop.
Point your assistant at a target and say "scan this." The connector exposes Scout as typed MCP tools, so the agent can:
Every scan still requires you to confirm the in-scope hostname. Your account credentials are never sent to the model.
no per-browser certificate ritual.
defeats most interception proxies.
tier. The probe library is cryptographically signed and refreshes daily against OWASP and CVE intelligence.
Claude Desktop for you. Download: https://gorgoncyber.com/scout-download.html
This is a proprietary connector to a commercial app. It is not a standalone open-source MCP server.
https://gorgoncyber.com/scout-download.html Leave the Claude AI Integration connector enabled. It is registered automatically.
Advanced: the connector is also published as a .mcpb Desktop Extension you can add to Claude Desktop manually: https://storage.googleapis.com/gorgon-scout-downloads/gorgon-scout.mcpb (It still requires the Gorgon Scout app to be installed.)
A step-by-step guide: https://gorgoncyber.com/scout-claude.html
22 tools across account/sign-in, profile management, spec import, AI auto-record, interactive auth handling, scan start/poll/cancel, and AI analysis. See manifest.json for the full list and descriptions.
Gorgon Scout and this connector are products of Gorgon Cyber Pty. Ltd., Melbourne, Australia. Designed for testing applications you own or are explicitly authorised to test.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.