MCP Audit Tool
some-mcp-server · by graygnatconsole
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
No known CVEs
MIT license
Actively maintained
Last commit 3d ago
Works with most clients
Transport: stdio, sse, http
0 tools
Grade F
MCPpedia last refreshed this data
MCP Audit Tool is an MCP server that 🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 61/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"mcp-audit-tool": {
"args": [
"-y",
"some-mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mcp-audit-tool)
Read me
What MCP Audit Tool does
Scan your AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection, and supply-chain risks — before the model runs something you regret.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'some-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
61/100across 5 weighted dimensions
0255075100
22
15
14
10
−39
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked some-mcp-server against OSV.dev.
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is MCP Audit Tool safe to use?
- MCP Audit Tool has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install MCP Audit Tool?
- MCP Audit Tool supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with MCP Audit Tool?
- MCP Audit Tool is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is MCP Audit Tool actively maintained?
- MCP Audit Tool is actively maintained - last commit was 3 days ago. It has 118 GitHub stars.
Related
Similar servers
Others in ai-ml / security
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
I
io.github.mims-harvard/tooluniverse962,500+ scientific tools for AI scientists: life science, research, literature, and more.
1.7k 4
Gemini Cli95An open-source AI agent that brings the power of Gemini directly into your terminal.
107.2k 8
Suede Creator Skills95Read-only access to 71 Suede skills: discovery, install options, SEO audits, A-F grading.
126 2
MCP Security Weekly
Get CVE alerts and security updates for MCP Audit Tool and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.