pfrederiksen/MCPSec Audit
OWASP MCP Top 10 security scanner for Model Context Protocol server configurations
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| config | Path to the MCP config file or directory to scan | yes | — |
| format | Output format: table, json, splunk | no | table |
| severity | Filter by severity (comma-separated: critical,high,medium,low,info) | no | — |
| fail-on | Exit with code 1 if findings at or above this severity (critical,high,medium,low,info) | no | — |
| rules | Path to custom rules directory | no | — |
| input-format | Input format: auto, mcpservers, dxt, dxtdir | no | auto |
| output | Output file path (findings are also printed to stdout) | no | — |
| version | MCPSec version to install (default: latest) | no | latest |
Outputs
| name | description |
|---|---|
| findings-count | Number of findings detected |
| results-file | Path to the output file (if --output was used) |