Skip to Content

Proximity: Open-Source Security Scanner for MCP Server Vulnerabilities

Securing the Expanding World of MCP Servers

The rapid rise of AI platforms has created new opportunities and significant new risks. With Model Context Protocol (MCP) servers at the heart of customizable AI integrations, ensuring these systems are secure is now a top priority for organizations seeking to protect their data and operations.

How Proximity Enhances MCP Server Security

Proximity steps in as a powerful open-source security scanner tailored for MCP environments. Its core function is to analyze both local and remote MCP servers, cataloging what is publicly exposed. This includes:

  • Prompts that guide AI system behavior
  • Tool names and descriptions accessible to end users
  • Resource details that could inadvertently disclose sensitive operations

By mapping these elements, Proximity enables organizations to spot potential leaks and oversharing before attackers do. Exposed prompts or overly descriptive tool metadata can become vectors for sophisticated exploits, making early discovery crucial.

Advanced Detection with NOVA Rule Engine

What sets Proximity apart is its integration with the NOVA rule engine. This feature empowers security teams to craft custom, pattern-based rules targeting:

  • Prompt injection attacks: where malicious actors manipulate AI input to alter outputs
  • Jailbreak attempts: efforts to bypass intended restrictions and controls
  • Tool poisoning or unauthorized data access

With NOVA, analysts gain flexibility to adjust their defenses in real time, responding to evolving tactics and threats. The rule-driven system is especially valuable in fast-moving AI environments where static security measures may quickly become outdated.

Responding to the Expanding Threat Surface

The growing adoption of public MCP servers has inadvertently widened the attack surface for AI-driven organizations. Many developers, eager to harness the power of AI extensions, may overlook essential security measures. This leaves critical systems vulnerable to:

  • Prompt injection
  • Tool poisoning
  • Data exfiltration

Proximity automates the initial discovery and assessment process, making it accessible even for teams without deep AI expertise. Its streamlined scans provide actionable insights, helping organizations close security gaps before production deployment.

The Power of Open Source and Community

Available freely on GitHub, Proximity exemplifies the collaborative nature of modern security. By embracing open-source principles, it welcomes contributions from defenders worldwide, ensuring the tool evolves rapidly in response to new threats and technologies.

Proximity’s user-friendly design and extensibility through NOVA make it a practical addition to any security toolkit. Teams can quickly adapt rulesets to address unique risks, staying one step ahead of adversaries targeting AI infrastructure.

Key Takeaway: Proactive Security for AI-Driven Systems

As MCP servers become integral to AI deployments, proactive security assessments are no longer optional, they are essential. Proximity’s open-source model, combined with its robust rule-based scanning, equips security professionals to identify vulnerabilities early and maintain trust in complex, interconnected environments.

Source: Help Net Security

Proximity: Open-Source Security Scanner for MCP Server Vulnerabilities
Joshua Berkowitz November 5, 2025
Views 44
Share this post