new active script to detect open mcp servers

[bananabr]

This script detects potentially exposed MCP servers by sending MCP initialization requests

[psiinon]

Checkmarx One – Scan Summary & Details – 793427ef-4016-4478-a68f-ddccca46822f

Great job! No new security vulnerabilities introduced in this pull request

---

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

[psiinon]

@bananabr thanks for this PR!

Am I right in thinking that the paths you're checking should be absolute, ie https://www.example.com/mcp or should they be relative (and therefore recurse through the tree), e.g. https://www.example.com/a/mcp, https://www.example.com/a/b/mcp?

Do you have any links to example MCP servers which this rule detects so we can test it?

The build is failing, but it looks like you can fix that with ./gradlew :spotlessApply

[kingthorin]

The file name and code link don't match.

They should also follow the naming guidance: https://github.com/zaproxy/community-scripts/blob/main/CONTRIBUTING.md#naming-scripts

[kingthorin]

To address the DCO requirement you'll need to sign-off the commit(s):

• https://github.com/zaproxy/zaproxy/blob/main/CONTRIBUTING.md#developer-certificate-of-origin
• https://git-scm.com/docs/git-commit#Documentation/git-commit.txt---signoff

---

If it makes life easier feel free to squash it all into one commit.

[bananabr]

@bananabr thanks for this PR!

Am I right in thinking that the paths you're checking should be absolute, ie https://www.example.com/mcp or should they be relative (and therefore recurse through the tree), e.g. https://www.example.com/a/mcp, https://www.example.com/a/b/mcp?

Do you have any links to example MCP servers which this rule detects so we can test it?

The build is failing, but it looks like you can fix that with ./gradlew :spotlessApply

I think there is merit in both. It becomes a matter of performance versus completeness in my opinion. Most cases I found in the wild were under the server's root directory though.

Here is a sample of an open MCP server you can use for testing: https://gist.github.com/bananabr/52570a3d6c23f83c2dbd0690afc28cb4