rankgnar/MCP Audit
Security auditor for MCP servers — detect prompt injection, shadow tools, data exfiltration, and supply chain attacks
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to the MCP server to audit | no | . |
| severity | Minimum severity to report (low, medium, high, critical) | no | low |
| format | Output format (json, markdown) | no | markdown |
| output | File path to save the report | no | "" |
| config | Path to .mcp-audit.yml config file | no | "" |
| no-dynamic | Skip dynamic analysis | no | false |
| no-deps | Skip dependency analysis | no | false |
| fail-on | Minimum severity to fail the action (low, medium, high, critical) | no | high |
Outputs
| name | description |
|---|---|
| total | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |
| passed | Whether the audit passed (no findings >= fail-on severity) |