MCP Server
Mcp Audit Tool
🛡️ Security audit CLI for Model Context Protocol (MCP) servers - scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
- Security & Testing
- By graygnatconsole
Features
- Zero-config auto-discovery - finds Claude Desktop, Cursor, Windsurf, Cline, Zed, and VS Code MCP configs on macOS, Linux, and Windows automatically
- Security score & grade (A+ → F) with clear, actionable remediation for every finding
- Beautiful terminal reports powered by Rich - plus machine-readable JSON and SARIF 2.1.0 output
- CI/CD ready - fail builds on severity thresholds and upload findings to GitHub Code Scanning
- Pure Python 3.9+ - three tiny dependencies (typer, rich, pyyaml), installs in seconds
- Extensible rule engine - adding a new rule is one small function (see CONTRIBUTING)
Frequently asked questions
What does Mcp Audit Tool do?
🛡️ Security audit CLI for Model Context Protocol (MCP) servers - scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
Is Mcp Audit Tool open source?
Yes — graygnatconsole's source code is publicly available on GitHub, linked above.
What category is Mcp Audit Tool in?
Mcp Audit Tool is listed under Security & Testing.
Who maintains Mcp Audit Tool?
Mcp Audit Tool is built and maintained by graygnatconsole.