mcp-audit

keithalindsay/mcp-audit

★ 0 stars TypeScript Code/Dev Tools Updated today

A security linter for MCP servers — connect, introspect, and flag the tool designs that turn an AI agent into an exfiltration or code-execution vector. Combination/taint analysis for the lethal trifecta. Runs in 60s on a bundled vulnerable server.

View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "mcp-audit": {
      "command": "npx",
      "args": [
        "-y",
        "keithalindsay/mcp-audit"
      ]
    }
  }
}

README Excerpt

**A security linter for MCP servers** — connect, introspect, and flag the tool designs that turn an AI agent into an exfiltration or code-execution vector. Runs in 60 seconds on a bundled vulnerable server, zero setup, no API key. --- ```text $ npx mcp-audit demo mcp-audit · target=vulnerable-demo (3 tools, 1 resource, 0 prompts)

Tools (11)

MCP001MCP002MCP003MCP004MCP005MCP006MCP007MCP008MCP009MCP010MCP011

mcp-audit

Quick Install

README Excerpt

Tools (11)

Related Code/Dev Tools Servers