Mmcp.market

MCP Security & Vulnerability Auditor MCP server

by Ansarii·io.github.Ansarii/mcp-security-auditor·v1.0.0
No reviews yet

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

B75/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed MCP Security & Vulnerability Auditor yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP Security & Vulnerability Auditor tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 10668ms; handshake note: MCP handshake timed out after 10000ms12/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http mcp-security-auditor https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcp
Add to Cursor

MCP Security & Vulnerability Auditor: common questions

Is MCP Security & Vulnerability Auditor MCP server safe?
Mostly: it is graded B (75/100). Read the MCP Security & Vulnerability Auditor safety report
How do I install MCP Security & Vulnerability Auditor?
It runs remotely at neon_innovation_lab--mcp-security-auditor.apify.actor. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does MCP Security & Vulnerability Auditor need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MCP Security & Vulnerability Auditor maintained?
The last commit was in the last day (2026-09-19). The latest release is v1.0.0.
Is MCP Security & Vulnerability Auditor up?
0% of our last 1 checks got an answer. We check remote servers about four times a day.
What can I use instead of MCP Security & Vulnerability Auditor?
Servers from other publishers that do the same job: Security Preflight MCP server, Security Txt Cra Lint MCP server and Draugr MCP server. Compare all MCP Security & Vulnerability Auditor alternatives.

Alternatives to MCP Security & Vulnerability Auditor

Same job from other publishers: the closest match first, then the best rated.

All MCP Security & Vulnerability Auditor alternatives →
  • Security Preflight
    Static MCP, source-code and injection-indicator checks with redacted signed receipts.
    B
  • Security Txt Cra Lint
    13 rules that decide whether a vulnerability report ever reaches you
    More from jmshinhwa →
    A
  • Draugr
    Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.
    A
  • ScanLabsAI Security Scanner
    Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
    B
  • FlowSentry
    Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.
    C
MCP Security & Vulnerability Auditor vs Security PreflightMCP Security & Vulnerability Auditor vs Security Txt Cra LintMCP Security & Vulnerability Auditor vs Draugr

More from Ansarii →