auditmcp

A local-first audit-logging proxy for MCP (Model Context Protocol) tool calls — sits transparently between an MCP client and server, logging every tool call to a tamper-evident, hash-chained SQLite database with automatic secret redaction. No telemetry, no cloud dependency, fail-open by design.

{
  "mcpServers": {
    "auditmcp": {
      "command": "cargo",
      "args": [
        "run",
        "--",
        "auditmcp"
      ]
    }
  }
}

claude mcp add auditmcp cargo run -- auditmcp

{
  "mcpServers": {
    "auditmcp": {
      "command": "cargo",
      "args": [
        "run",
        "--",
        "auditmcp"
      ]
    }
  }
}