mcp-audit

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/saagpatel-mcp-audit

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools

12 read · 0 write · 0 delete · 1 not yet classified

Secrets

None asked for

Install scripts

None found

Runs as

Python package

Tools (13)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• check_server

  Audit one uniquely named server, including its pin check. Returns JSON audit result. Reach: connects to the named server when it is workstation-scope, which can start its configured local program or contact its configured endpoint. A project-scope entry is not connected and is reported as a `project_config_not_connected` warning. A withheld pin baseline (`pin_baseline_withheld`) appears as partial coverage in `warnings`, not as a tool failure.

• get_artifact_verify_findings

  Return byte-level artifact drift vs the pin baseline. Returns JSON `{findings, warnings}`. Reach: static toward MCP servers (connects to none); NETWORK: downloads artifact bytes from the npm/PyPI package registries only and hashes them. Requires a pin baseline captured with `mcp-audit pin --download-artifacts`; without one `findings` is empty and `warnings` explains why. A withheld pin baseline (`pin_baseline_withheld`) appears as partial coverage in `warnings`, not as a tool failure.

• get_escalation_findings

  Return capability-escalation findings vs the pin baseline. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings. Requires a pin baseline (run `mcp-audit pin` first); without pins `findings` is empty and `warnings` carries a `pin_baseline_missing` entry explaining why. A withheld pin baseline (`pin_baseline_withheld`) appears as partial coverage in `warnings`, not as a to…

• get_high_risk_servers

  Return servers with composite risk score ≥ 7.0 as a JSON list of name/score objects. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings. Coverage warnings, including project_config_not_connected, are in structuredContent.warnings and a second text block alongside the list.

• get_injection_findings

  Return all prompt injection findings across all servers. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings.

• get_integrity_findings

  Return launch-artifact integrity drift vs the pin baseline. Returns JSON `{findings, warnings}`. Reach: static and offline; connects to no MCP server and only hashes on-disk bytes. Requires a pin baseline that captured artifact hashes (run `mcp-audit pin` first); without one `findings` is empty and `warnings` explains why. A withheld pin baseline (`pin_baseline_withheld`) appears as partial coverage in `warnings`, not as a tool failure.

• get_package_verify_findings

  Return registry package-hash drift vs the pin baseline. Returns JSON `{findings, warnings}`. Reach: static toward MCP servers (connects to none); NETWORK: contacts the npm/PyPI package registries only. Requires a pin baseline captured with `mcp-audit pin --verify-artifacts`; without one `findings` is empty and `warnings` explains why. A withheld pin baseline (`pin_baseline_withheld`) appears as partial coverage in `warnings`, not as a tool failure.

• get_provenance_findings

  Return launch-config provenance drift vs the pin baseline. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings. Requires a pin baseline with a config snapshot (run `mcp-audit pin` first); without one `findings` is empty and `warnings` carries a `pin_baseline_missing` or `pin_baseline_stale` entry explaining why. A withheld pin baseline (`pin_baseline_withheld`) appears …

• get_shadowing_findings

  Return all cross-server tool-name shadowing findings. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings.

• get_ssrf_findings

  Return all SSRF findings across all servers. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings.

• get_trifecta_findings

  Return per-server and fleet-level lethal-trifecta findings. Returns JSON `{findings, warnings}`. Reach: connects to every discovered workstation-scope MCP server, which can start configured local programs or contact configured endpoints. Project-scope entries are not connected and are reported as `project_config_not_connected` warnings.

• list_discovered_servers

  Return names and clients of discovered servers as a JSON list, with coverage warnings. Reach: static; reads configuration and connects to no server. Warnings are in structuredContent.warnings and a second text block alongside the list.

• scan_mcp_servers

  Run a full audit of all discovered MCP servers. Returns JSON report. Reach: static by default; it reads configuration and connects to no server. Pass connect=true to connect to discovered workstation-scope servers, which can start configured local programs or contact configured endpoints. Project-scope entries are never connected and are reported as `project_config_not_connected` warnings. skip_connect=true always disables connections, even with connect=true.

Signals

Stars

4

Forks

0

Open issues

3

Weekly downloads

122

Last commit

Oct 14, 2026 (14 days ago)

Last release

Oct 13, 2026 (15 days ago)

Last package publish

Oct 13, 2026 (15 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.saagpatel/mcp-audit

Version

2.12.0

Auth

No auth

Packages

pypi mcp-audits

License

MIT

Repository

github.com/saagpatel/MCPAudit

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql