mcp-surfacecheck

major-matters/mcp-surfacecheck
★ 0 stars Python Code/Dev Tools Updated 2d ago
Static, read-only security surface check for MCP servers, as a GitHub Action. Same checks as majorlabs.co/security. Never probes anything.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-surfacecheck": {
      "command": "uvx",
      "args": [
        "mcp-surfacecheck"
      ]
    }
  }
}

Or install with pip: pip install mcp-surfacecheck

README Excerpt

A read-only static security check for MCP servers, as a GitHub Action. Drop it into your CI and it reads your source for the patterns that matter when an AI agent is on the other end — command injection, SSRF surface, code execution, unsafe deserialization, committed secrets — then writes a job summary and gives you a README badge.

Tools (4)

badgepathscoretier