{"name":"io.github.saagpatel/mcp-audit","slug":"saagpatel-mcp-audit","title":"mcp-audit","description":"Scan, enumerate, and risk-score every MCP server configured on your machine.","url":"https://mcp.market/server/saagpatel-mcp-audit","rating":null,"grade":"A","score":89,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":30,"stars":4,"forks":0,"downloads_week":41,"last_push_at":"2026-09-18T23:09:34.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/saagpatel/MCPAudit","website":null,"version":"2.7.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"mcp-audits","version":"2.7.0","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"value":"serve","type":"positional"}]}],"tools":[{"name":"check_server","description":"Audit a single server by name. Returns JSON audit result.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_artifact_verify_findings","description":"Return byte-level artifact drift vs the pin baseline. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_escalation_findings","description":"Return capability-escalation findings vs the pin baseline. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_high_risk_servers","description":"Return servers with composite risk score ≥ 7.0. Returns JSON list.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_injection_findings","description":"Return all prompt injection findings across all servers. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_integrity_findings","description":"Return launch-artifact integrity drift vs the pin baseline. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_package_verify_findings","description":"Return registry package-hash drift vs the pin baseline. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_provenance_findings","description":"Return launch-config provenance drift vs the pin baseline. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_shadowing_findings","description":"Return all cross-server tool-name shadowing findings. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_ssrf_findings","description":"Return all SSRF findings across all servers. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_trifecta_findings","description":"Return per-server and fleet-level lethal-trifecta findings. Returns JSON `{findings, warnings}`.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_discovered_servers","description":"Return names and clients of all discovered MCP servers. Returns JSON list.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_mcp_servers","description":"Run a full audit of all discovered MCP servers. Returns JSON report.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":89,"grade":"A","scanned_at":"2026-09-23T11:51:14.062Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-23T11:51:14.118Z","components":{"code":{"score":25,"max":25,"notes":["80 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 5 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"pypi","identifier":"mcp-audits","version":"2.7.0","found":true,"weeklyDownloads":41,"license":"MIT","dependencyCount":10,"publishedAt":"2026-08-16T06:05:24.044476Z","repositoryUrl":"https://github.com/saagpatel/MCPAudit"}],"repo":{"found":true,"owner":"saagpatel","repo":"MCPAudit","archived":false,"pushedAt":"2026-09-18T23:09:34Z","stars":4,"forks":0,"openIssues":5,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/269905221?v=4","ownerCreatedAt":"2026-03-21T09:11:17Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":4,"forks":0,"downloadsWeek":41,"license":"MIT","lastPushAt":"2026-09-18T23:09:34.000Z","score":30}}}},"grade_history":[],"reviews":[]}