/** * mcp-scan as an MCP server. * * Running `mcp-scan --serve` exposes the scanner over the Model Context * Protocol so any MCP client (Claude Code, Codex, Cursor, and so on) can add * mcp-scan and tool-call it to audit other MCP servers against the OWASP MCP * Top 10. It is still passive: the target is enumerated and analyzed, never * exploited. * * Trust note: scanning a stdio target means spawning the command you pass, so * only connect this server in a context where those commands are trusted, the * same as running the CLI yourself. */ import { Server } from "@modelcontextprotocol/sdk/server/index.js"; import type { ScanResult } from "./types.js"; /** Compact, agent-friendly digest of a scan result. */ export declare function renderAgentSummary(result: ScanResult): string; /** Build the mcp-scan MCP server (not yet connected to a transport). */ export declare function createScanServer(): Server; /** Run mcp-scan as an MCP server over stdio. Resolves only when the transport closes. */ export declare function runMcpServer(): Promise;