Config Audit MCP server

by jmshinhwa·io.github.jmshinhwa/mcp-config-audit·v1.0.2

Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, pla

A89/100grade A

What users say

No reviews yet

Safety scan

A89/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Config Audit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan6 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @readystack/mcp-config-audit on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-config-audit -- npx -y @readystack/mcp-config-audit

Is Config Audit MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the Config Audit safety report
How do I install Config Audit?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Config Audit need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Config Audit maintained?: The last commit was in the last day (2026-09-19). The latest release is v1.0.2.
What can I use instead of Config Audit?: Servers from other publishers that do the same job: Bomly MCP server, Roast My Design System MCP server and Ausca MCP server. Compare all Config Audit alternatives.

Same job from other publishers: the closest match first, then the best rated.

Bomly
Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit
not reviewed
Growing
B
Roast My Design System
Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
not reviewed
Established
A
Ausca
Pay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.
not reviewed
Established
B
Claudinho
Live 2026 World Cup scores, fixtures & standings for your AI agent. No keys. Unofficial fan project.
not reviewed
Growing
A
Patchloom
Agent-safe structured edits: JSON/YAML/TOML/md/AST, dry-run, batch/tx. Not a filesystem MCP.
not reviewed
Growing
B