saagpatel/MCPAudit

Audit locally configured MCP servers for permission, prompt-injection, SSRF, lethal-trifecta, shadowing, escalation, and provenance risk. Emits SARIF/JSON and can fail the build on a local policy gate.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
version	Exact mcp-audits version to install (e.g. "2.0.0"). Defaults to the latest published release.	no	""
args	Extra arguments appended verbatim to `mcp-audit scan` (e.g. "--inject-check --ssrf-check --trifecta-check").	no	""
skip-connect	Run config-only without spawning or connecting to servers. Strongly recommended in CI. Set to "false" only for trusted, network-isolated runs.	no	true
clients	Comma-separated client filter (e.g. "claude_code,cursor").	no	""
config	Audit a single explicit MCP config file (implies --config-only). Leave empty to audit all discovered configs.	no	""
policy	Path to a local policy YAML. A failing policy makes this action exit 2 (after reports are written and SARIF is uploaded).	no	""
sarif	SARIF 2.1.0 output path. Set to "" to disable SARIF output.	no	mcp-audit.sarif
json	JSON report output path. Empty disables JSON output.	no	""
upload-sarif	Upload the SARIF file to GitHub code scanning (requires `security-events: write`). Ignored when `sarif` is empty.	no	true
sarif-category	Optional GitHub code scanning category for this upload. Use a stable value when multiple SARIF producers report on the same commit.	no	mcp-audit
working-directory	Directory to run the scan from (repo-local configs are discovered relative to it).	no	.

Outputs

name	description
sarif-file	Path to the written SARIF report (empty if SARIF was disabled).
json-file	Path to the written JSON report (empty if JSON was disabled).
exit-code	The mcp-audit exit code (0 clean, 2 policy gate failed).