Check out the MCPwned scanner—it generates detailed control flow, data flow, and side channel exploits for popular MCP servers.