Open-source MCP security scanner
Know what your AI agents can access.
Download Zinloop for Windows, macOS or Linux. Scan locally, review exposed secrets and unsafe MCP configurations, and choose when to share a redacted report.
Windows scanner
Standalone binary · local and offline by default · no account needed
6.7 MB · platform-specific build
Run your first scan
Run a standalone binary without an upload token. The scanner reads supported local AI connector configs and writes a redacted report you can inspect in your browser.
Invoke-WebRequest "https://zinloop.com/download/zinloop-windows-amd64.exe" -OutFile zinloop.exe
Get-FileHash .\zinloop.exe -Algorithm SHA256
.\zinloop.exe --json --out scan.jsonCompare the SHA-256 output against the published checksum before running. The command above displays the hash; it does not automatically enforce verification.
Deploy to managed client laptops
MSPs should create a client-specific, revocable upload token inside the console, then deploy the scanner using their RMM or the existing platform install scripts. Do not embed MSP admin credentials into scripts.
After installing, open that client's page to create an upload token and view its scan findings. Secrets and raw prompts are not included in scanner reports.
Public download links use Zinloop's existing allowlisted release redirect. For a live MSI, PKG or DEB/RPM installation experience, additional platform-specific installers would be required; the current artifacts are executable binaries and install scripts.