mcp-audit-tool

🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.

CategoryAI Agent Frameworks
Authorgraygnatconsole
Stars320
LanguagePython
LicenseMIT
Last update2026-09-26
Sourcehttps://github.com/graygnatconsole/mcp-audit-tool

Tags: agent-security, agentic-ai, ai-security, cursor, llm-guardrails, llm-security, mcp, mcp-audit, mcp-scanner, mcp-security, mcp-server, mcp-server-python, model-context-protocol, prompt-injection, security-scanner, supply-chain, supply-chain-security, tool-poisoning, vulnerability-scanner

Maintain this project? Get it featured.

Alternatives to mcp-audit-tool

rea morluto · ★278898 · TypeScript
Reverse engineer anything with agents, from app behavior down to native binaries.
deepseek-harness deepseek-ai · ★250738 · TypeScript
DeepSeek Harness: Everything is a Plugin.
ponytail DietrichGebert · ★164692 · JavaScript
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
gemini-cli google-gemini · ★107398 · TypeScript
An open-source AI agent that brings the power of Gemini directly into your terminal.
paperclip paperclipai · ★102899 · TypeScript
The open-source app everyone uses to manage agents at work
orca stablyai · ★93851 · TypeScript
Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and remote runtime.