Static security scanner for MCP (Model Context Protocol) server config: leaked secrets, SSRF, missing auth, unpinned packages. 14 automated checks mapped to OWASP AISVS.
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"mcp-server-audit": {
"command": "npx",
"args": [
"-y",
"DSHCorrectover/mcp-server-audit"
]
}
}
}
Run in terminal:
claude mcp add mcp-server-audit npx -y DSHCorrectover/mcp-server-audit
Add to .cursor/mcp.json:
{
"mcpServers": {
"mcp-server-audit": {
"command": "npx",
"args": [
"-y",
"DSHCorrectover/mcp-server-audit"
]
}
}
}