MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers
mcp-server-audit · by shriramkv
A CI-friendly open-source CLI that statically audits MCP servers before they are wired into AI agents. It flags tool poisoning, hidden Unicode payloads, misleading annotations, and lax schemas, without ever invoking a tool, and reports findings by severity for pipeline gating.
No known CVEs
MIT license
Maintained
Last commit 75d ago
Works with most clients
Transport: stdio, http
5 tools · ~286 tok
Grade A · 0.1% of 200K ctx
MCPpedia last refreshed this data
MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers is an MCP server that a CI-friendly open-source CLI that statically audits MCP servers before they are wired into AI agents. It flags tool poisoning, hidden Unicode payloads, misleading annotations, and lax schemas, without ever invoking a tool, and reports findings by severity for pipeline gating. Its tool list has not been published yet over stdio and http, requires no API key, and scores 81/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"mcp-server-audit-a-static-security-and-hygiene-audit-cli-for-mcp-servers": {
"args": [
"mcp-server-audit"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mcp-server-audit-a-static-security-and-hygiene-audit-cli-for-mcp-servers)
Read me
What MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers does
Static security and hygiene audit for MCP servers. Point it at any Model Context Protocol server (or an offline dump of its tool definitions) and get a ranked report of tool-poisoning indicators, lax schemas, misleading annotations, and high-impact capabilities. Drop it into CI and block merges on critical findings.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'mcp-server-audit' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
81/100across 5 weighted dimensions
0255075100
28
8
20
15
10
−19
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked mcp-server-audit against OSV.dev.
Inventory
Tools (5)
Click any tool to inspect its schema.
~286 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers safe to use?
- MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
- How do I install MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers?
- MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers do?
- MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers provides 5 tools: Why, Install, Usage, Checks, Contributing. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers?
- MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
- Is MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers actively maintained?
- MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers is recently maintained - last commit was 75 days ago. It has 23 GitHub stars.
Related
Similar servers
Others in ai-ml
I
io.github.mims-harvard/tooluniverse962,500+ scientific tools for AI scientists: life science, research, literature, and more.
1.7k 4
I
io.github.callstack/agent-device95MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
4.8k 5
Codebase Memory Mcp95Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
45.0k 6
Suede Creator Skills95Read-only access to 71 Suede skills: discovery, install options, SEO audits, A-F grading.
126 2
MCP Security Weekly
Get CVE alerts and security updates for MCP Server Audit A Static Security And Hygiene Audit CLI For MCP Servers and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.