Highflame Identity is now open source: agent identity on open standards. Read the launch
← All articles

Announcing the Ramparts MCP Toolkit on Docker Hub

Sep 10, 20252 min read

Highflame is proud to announce that the Ramparts MCP Toolkit is officially available on the Docker Hub registry. We’ve made setup simple with a single docker pull command, enabling any developer to deploy enterprise-grade MCP security scanning in under two minutes. This release marks a pivotal step in our mission to make robust AI security accessible to everyone, not just security experts.

A Secure Configuration in Three Minutes

With the new Docker release, getting a comprehensive security report is faster than making a cup of coffee.

1. Install : Pull the official, signed image from Docker Hub.

docker pull mcp/ramparts

docker run --rm -it --entrypoint /app/ramparts -v "$HOME:/root" mcp/ramparts scan-config

docker run --rm -it --entrypoint /app/ramparts  mcp/ramparts scan https://mcp.deepwiki.com/mcp

docker run --rm -it -e LLM_API_KEY="$OPENAI_API_KEY"  --entrypoint /app/ramparts  mcp/ramparts scan https://api.githubcopilot.com/mcp --auth-headers "Authorization: Bearer $GITHUB_TOKEN"

2. Configure: Add a simple JSON block to your IDE’s MCP configuration file.

`{
  "mcpServers": {
    "ramparts": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "host",
        "-v",
        "$USER_HOME:/root",
        "mcp/ramparts"
      ]
    }
  }
}`

**`Replace  $USER_HOME with your system/workspace home path.`**

3. Scan & Review : Use your AI assistant to run a scan and get a clear, actionable report. Ramparts provides two primary tools:

scan: For assessing a single MCP server URL.

{
  "url": "stdio:npx[filesystem]",
  "status": "Success",
  "server_info": {
    "name": "filesystem",
    "version": "1.0.0",
    "tools": 12
  },
  "security_analysis": {
    "overall_score": 10,
    "risk_level": "LOW",
    "vulnerabilities_found": 0
  },
  "yara_results": [
    {
      "rule_name": "YARA_PRE_SCAN_SUMMARY",
      "status": "passed",
      "matches": 0,
      "rules_executed": 6
    }
  ],
  "tool_analysis": [
    {
      "name": "read_file",
      "security_score": 10,
      "issues": []
    },
    {
      "name": "write_file",
      "security_score": 9,
      "issues": ["Requires file path validation"]
    }
  ]
}


scan-config: For a comprehensive audit of your entire IDE configuration.

{
  "servers_scanned": 8,
  "total_tools": 56,
  "security_summary": {
    "passed": 7,
    "warnings": 1,
    "critical": 0
  },
  "findings": [
    {
      "server": "stdio:npx[filesystem]",
      "status": "✅ SECURE",
      "tools": 12,
      "yara_matches": 0,
      "security_score": 10
    },
    {
      "server": "stdio:npx[playwright]",
      "status": "✅ SECURE",
      "tools": 21,
      "yara_matches": 0,
      "security_score": 10
    },
    {
      "server": "https://api.githubcopilot.com/mcp/",
      "status": "⚠️ NEEDS_AUTH",
      "tools": 89,
      "yara_matches": 2,
      "security_score": 8,
      "issues": ["Missing authentication headers"]
    }
  ]
}

Get Started and Join the Community

Start securing your MCP infrastructure today. Pull the official Ramparts image, and get your first security report in under two minutes!

We invite you to get involved and help us advance MCP security for the entire community.

For more information about Ramparts MCP Scan & the capabilities that it offers, see the detailed features.

Start securing your agents today.