Config Audit MCP server

by jmshinhwa·io.github.jmshinhwa/mcp-config-audit·v1.0.2

Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, pla

A89/100grade A

What users say

No reviews yet

Safety scan

A89/100

Adoption

Growing

0 stars405 downloads/wk

Reviews

Nobody has reviewed Config Audit yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings

Code scan6 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 89/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 89/100; higher than 83% of 4,461 AI and agents servers
Downloads a week: 405; more than 84% of 1,554 AI and agents servers with a package

Runs npx -y @readystack/mcp-config-audit on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-config-audit -- npx -y @readystack/mcp-config-audit

From the Config Audit repository's README, as published. We do not edit it. Read it on GitHub

VS Code themes by ReadyStack

Nothing above is checked by us. What we check is on the safety report.

Is Config Audit MCP server safe?: Yes, by our scan: it is graded A (89/100). Read the Config Audit safety report
How do I install Config Audit?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Config Audit need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Config Audit maintained?: The last commit was 33 days ago (2026-10-03). The latest release is v1.0.2.
What can I use instead of Config Audit?: Servers from other publishers that do the same job: Figma Context MCP server, Roast My Design System MCP server and three.ws Avatars MCP server.
How does Config Audit compare with other AI and agents MCP servers?: safety score 89/100 (higher than 83% of 4,461 AI and agents servers); downloads a week 405 (more than 84% of 1,554 AI and agents servers with a package). Full comparison.

Same job from other publishers: the closest match first, then the best rated.

Figma Context
Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.
not reviewed
Widely used
B
Roast My Design System
Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
not reviewed
Established
A
three.ws Avatars
three.ws 3D avatars in your agent: render a live, interactive 3D avatar inline, or get an embed.
More from nirholas →
not reviewed
Established
A
Roast My Design System
Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
not reviewed
Established
A
Ausca
Pay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.
not reviewed
Established
A