foncki/MCP-SecLint
MCP-SecLint: Static analysis tool for detecting vulnerabilities in MCP server implementations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to analyze | no | . |
| config | Path to configuration file | no | .mcp-lint.json |
| fail-on-warnings | Fail the action if warnings are found | no | false |
| output-format | Output format (sarif, json, console) | no | sarif |
| github-token | GitHub token for PR comments | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| findings-count | Number of security findings |
| sarif-file | Path to SARIF output file |
| results-file | Path to the requested output format file |