Pricing

Pick the plan that fits how much MCP auth you run.

Free

For checking one MCP server's auth layer.

$0/ mo

No credit card required

npx mcpcomp

Standard features

  • Unauthenticated scanner CLI
  • Graded reports — every finding cites the spec
  • doctor: whose layer broke, from outside
  • verify: end-to-end OAuth flow proof
  • MCP server mode for agents
  • Entra credential-expiry checks & rotation
  • Monitor 1 server: daily scans, drift alerts by email + GitHub issues/PRs

Pro

MOST POPULAR

For teams monitoring production MCP auth.

$38$30/seat/mo

Billed annually

Start Proor start monthly

Everything in Free

  • Monitor up to 10 servers
  • Priority support

Enterprise

For organizations running MCP auth at scale.

Custom

Annual commitment

Request a demo

Everything in Pro

  • SSO / SAML sign-in
  • Custom server limits
  • Custom DPA & compliance review

Frequently asked questions

What does the MCPComp free plan include?

The full scanner with no credentials required: run npx mcpcomp <url> to grade an MCP server's authentication, use doctor to classify whose layer broke, and monitor 1 server with daily scans and drift alerts by email and GitHub issues or pull requests. No credit card required.

How does MCPComp Pro billing work?

Pro is $30 per seat per month billed annually ($360/year), or $38 per month billed monthly, through Stripe. You can manage or cancel the subscription any time from the billing portal in your dashboard; if it ends, your account returns to the free plan.

What counts as a monitored server?

Any MCP server URL you add in the dashboard. Each is scanned daily against its baseline, and you are alerted on configuration drift — a changed issuer, a dropped metadata field, or a failed check — by email and through the MCPComp GitHub App.

Does scanning require credentials or write access to my server?

No. The scanner's passive tier makes only the unauthenticated requests any MCP client would make before it has credentials. The active verify command, which proves the OAuth flow end to end, refuses to run without credentials you provision yourself.