mcp-audit-tool MCP Server
graygnatconsole/mcp-audit-tool
[](https://agentrank-ai.com/tool/graygnatconsole--mcp-audit-tool/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) π‘οΈ Security audit CLI for Model Context Protocol (MCP) servers β scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
graygnatconsole/mcp-audit-tool is a Python MCP server licensed under MIT. π‘οΈ Security audit CLI for Model Context Protocol (MCP) servers β scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready. Topics: agent-security, agentic-ai, ai-security, cursor, llm-guardrails, llm-security, mcp, mcp-audit, mcp-scanner, mcp-security, mcp-server, mcp-server-python, model-context-protocol, prompt-injection, security-scanner, supply-chain, supply-chain-security, tool-poisoning, vulnerability-scanner.
Ranked #14333 out of 24846 indexed tools.
Ecosystem
Score Breakdown
254 stars β growing community
Last commit 1mo ago β moderate activity
0/1 issues closed β many open issues
1 contributor β solo project
No dependents β no downstream usage
Weights: Freshness 20% Β· Issue Health 20% Β· Dependents 22% Β· Stars 10% Β· Contributors 8% Β· How we score β
How to Improve
Matched Queries
From the README
<div align="center"> # π‘οΈ mcp-audit-tool ### The security audit CLI for Model Context Protocol (MCP) servers **Scan your AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection, and supply-chain risks β before the model runs something you regret.** [Install](#-installation) Β· [Quickstart](#-quickstart) Β· [Rules](#-detection-rules) Β· [CI Integration](#-github-actions--ci) Β· [Roadmap](#-roadmap) </div> --- ## π Why audit your MCP setup? The [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) is the open standard that lets AI assistants β Claude Desktop, Cursor, VS Code Copilot, Windsurf, Cline, Zed β call external tools, read your files, and execute commands. Adoption exploded to **thousands of public MCP servers**, and security research keeps confirming the same story: **the MCP attack surface is real and largely unguarded.** A single line in your `claude_desktop_config.json` or `.cursor/mcp.json` can hand an AI model: - π **Your crRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights β straight to your inbox.