apisec-inc/MCP Audit
Scan repository for Model Context Protocol (MCP) configurations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 12, 2026
- License
- MIT
Pinned Snippet
uses: apisec-inc/mcp-audit@e06f35091d4424b973e5e3d36dc01ddcf593bcb7 # v1.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (defaults to repository root) | no | . |
| fail_on_risk | Fail if MCPs with this risk level or higher are found (none, low, medium, high) | no | none |
| policy_file | Path to policy file for validation | no | "" |
| output_format | Output format (json, markdown, table) | no | json |
Outputs
| name | description |
|---|---|
| total_mcps | Total number of MCPs found |
| with_risks | Number of MCPs with risk flags |
| high_risks | Number of high-risk MCPs |
| results_file | Path to results JSON file |