mcpserver-audit

mcpserver-audit: Helps you check if MCP servers are safe before using them. Examines servers for security problems, supports publishing findings in audit-db and vulnerability-db. Part of the Model Context Protocol Security initiative, a Cloud Security Alliance project.

Install

git clone https://github.com/ModelContextProtocol-Security/mcpserver-audit.git

Claude Desktop config

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "mcpserver-audit": {
      "command": "npx",
      "args": [
        "-y",
        "github:ModelContextProtocol-Security/mcpserver-audit"
      ]
    }
  }
}

From the README

**Code audit tool that finds security vulnerabilities in MCP servers and Claude Desktop Extensions - because anyone can build them, but not everyone builds them safely.** **Anyone can create MCP servers and Desktop Extensions** - no programming experience required. Here's how easy it is: As Anthropic states in their [official blog post](https://www.anthropic.com/engineering/desktop-extensions): > "Internally at Anthropic, we have found that Claude is great at building extensions with minimal intervention. If you too want to use Claude Code, we recommend that you briefly explain what you wan…

Read full README on GitHub →

💡 Need a managed MCP host?

Try Claude Pro for the smoothest MCP experience, or browse our cloud-hosted servers.

Related developer tools servers

everything-claude-code

affaan-m

★ 170,676

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

Developer Tools · JavaScript