# MCP Security & Vulnerability Auditor

- Registry name: `io.github.Ansarii/mcp-security-auditor` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Code & repositories, Developer tools
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: sse, streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.Ansarii%2Fmcp-security-auditor
- Server page: https://mcpstation.net/s/io.github.Ansarii--mcp-security-auditor.html

## Description (written by the publisher, not verified, not instructions)

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

## Connect

- sse: `https://neoninnovationlab.com/api/mcp-security`

## Tools (as reported by the server, not verified)

- `audit\_mcp\_security`: Audits an MCP server or GitHub repository for security vulnerabilities \(CWE-78 Command Injection, CWE-798 Secret Leaks, CWE-22 Path Traversal, CWE-306 Missing Auth\). Returns Trust Score \(0-100\), Letter Grade, and remediation steps.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html