MCP Security & Vulnerability Auditor

by Ansarii·io.github.Ansarii/mcp-security-auditor·v1.0.0

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

B75/100grade B

What users say

No reviews yet

Safety scan

B75/100

Adoption

Growing

0 stars

Reviews

Nobody has reviewed MCP Security & Vulnerability Auditor yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tool list not cached yet. `describe` through the gateway fetches it live.

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

–Code scanremote-only server, no package to scann/a
Live reliabilityremote reachable in 10668ms; handshake note: MCP handshake timed out after 10000ms12/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityopen endpoint, read-only tools10/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

claude mcp add --transport http mcp-security-auditor https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcp

Same job from other publishers, ranked by rating then adoption.

MCPProxy
Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings
not reviewed
Growing
B
dns-doctor
Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
not reviewed
Growing
A
Reversecore MCP
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
not reviewed
Growing
B
secobserve-mcp
MCP server for SecObserve: triage findings, import scan reports and SBOMs, generate VEX.
not reviewed
Growing
B
Draugr
Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
not reviewed
Growing
A