Hi team 👋
I ran a free deep security scan of microsoft/mcp-gateway using MCPSafe — a purpose-built scanner for MCP servers using a 5-LLM consensus panel to detect prompt injection risks, over-scoped tool schemas, supply chain issues, and more.
Results: 78/100 · Grade C
| Severity |
Count |
| 🔴 Critical |
0 |
| 🟠 High |
2 |
| 🟡 Medium |
12 |
| 🟢 Low |
0 |
Summary: 2 high + 12 medium findings — use with caution for a gateway handling MCP traffic and routing across services
📋 Full report with findings and evidence: https://mcpsafe.io/registry/github/microsoft/mcp-gateway
Add a security badge to your README
[](https://mcpsafe.io/registry/github/microsoft/mcp-gateway)
This badge auto-updates whenever a new scan runs — great for showing users and enterprise customers your security posture at a glance.
Feel free to close this if you're already tracking these findings. Happy to answer any questions about specific findings.
— Truong BUI · mcpsafe.io
Hi team 👋
I ran a free deep security scan of microsoft/mcp-gateway using MCPSafe — a purpose-built scanner for MCP servers using a 5-LLM consensus panel to detect prompt injection risks, over-scoped tool schemas, supply chain issues, and more.
Results: 78/100 · Grade C
Summary: 2 high + 12 medium findings — use with caution for a gateway handling MCP traffic and routing across services
📋 Full report with findings and evidence: https://mcpsafe.io/registry/github/microsoft/mcp-gateway
Add a security badge to your README
This badge auto-updates whenever a new scan runs — great for showing users and enterprise customers your security posture at a glance.
Feel free to close this if you're already tracking these findings. Happy to answer any questions about specific findings.
— Truong BUI · mcpsafe.io