MCP Security & Vulnerability Auditor

Working · 1.3 s

io.github.Ansarii/mcp-security-auditorv1.0.0

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Security

Source Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

audit_mcp_security

Audits an MCP server or GitHub repository for security vulnerabilities (CWE-78 Command Injection, CWE-798 Secret Leaks, CWE-22 Path Traversal, CWE-306 Missing Auth). Returns Trust Score (0-100), Letter Grade, and remediation steps.

targetstring, required

GitHub repository URL (e.g. "https://github.com/modelcontextprotocol/servers") or public MCP endpoint URL to audit.

This tool isn't marked read-only, so it may change something on the server or in an account you connected.

I understand, run it anyway

Tools (1)

audit_mcp_security

Argument	Type	Description
target*	string	GitHub repository URL (e.g. "https://github.com/modelcontextprotocol/servers") or public MCP endpoint URL to audit.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "target"
  ],
  "properties": {
    "target": {
      "type": "string",
      "description": "GitHub repository URL (e.g. \"https://github.com/modelcontextprotocol/servers\") or public MCP endpoint URL to audit."
    }
  }
}