eslint-plugin-mcp-security

mattschaller/eslint-plugin-mcp-security
★ 2 stars TypeScript 💻 Code/Dev Tools Updated today
ESLint security rules for MCP servers — catches SANDWORM_MODE credential harvesting, path traversal, command injection, and CVE patterns at dev time
View on GitHub →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "eslint-plugin-mcp-se": {
      "command": "npx",
      "args": [
        "-y",
        "mattschaller/eslint-plugin-mcp-security"
      ]
    }
  }
}

Topics

eslinteslint-pluginmcpsecuritysupply-chain