allenwu-blip/mcpaudit

Static pre-install security scanner for MCP (Model Context Protocol) servers — `npx mcpaudit <path>` flags command injection, credential/env exfiltration into LLM-visible output, over-broad filesystem/tool scope and dynamic eval before you wire a server into your agent.

3 best points · 0 comments · 1 Hacker News post · 4 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Mcpaudit – static security scanner for MCP servers (3 points, 0 comments, by allenwu06, 2026-05-22)