SecureMCP

by makalin · Go · ★ 139

SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks.

#ai-security#cli-tool#cli-tools#golang#llm-security#mcp#oauth#prompt-injection#security-scanner

Install

go install github.com/makalin/SecureMCP@latest

Claude Desktop config

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "securemcp": {
      "command": "npx",
      "args": [
        "-y",
        "github:makalin/SecureMCP"
      ]
    }
  }
}

From the README

**SecureMCP** is a comprehensive security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks. - AI Developers integrating MCP in applications - Security teams securing AI model interactions - DevSecOps engineers embedding MCP in CI/CD pipelines - Researchers studying AI model vulnerabilities - Security auditors assessing MCP implemen…

Read full README on GitHub →

💡 Need a managed MCP host?

Try Claude Pro for the smoothest MCP experience, or browse our cloud-hosted servers.

Related filesystem servers

cline

★ 61,214

Autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, using the browser, and more with your permission every step of the way.

Filesystem · TypeScript

mempalace

MemPalace

★ 50,486

The best-benchmarked open-source AI memory system. And it's free.

Filesystem · Python

GitNexus

abhigyanpatwari

★ 33,661

GitNexus: The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a GitHub repo or ZIP file, and get an interactive knowledge graph wit a built in Graph RAG Agent. Perfect for code exploration

Filesystem · TypeScript

github-mcp-server

github

★ 29,391

GitHub's official MCP Server

Filesystem · Go

repomix

yamadashy

★ 24,132

📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for when you need to feed your codebase to Large Language Models (LLMs) or other AI tools like Claude, ChatGPT, DeepSeek, Perplexity, Gemini, Gemma, Llama, Grok, and more.

Filesystem · TypeScript

claude-plugins-official

anthropics

Official ★ 18,276

Official, Anthropic-managed directory of high quality Claude Code Plugins.

Filesystem · Python