audit-mcp
Audit MCP server configurations with agent-bom for risky setups - credentials written into config, unpinned launchers, remote servers without authentication or TLS, broad filesystem or shell access, vulnerable or typosquatted packages, and coding-agent settings that run tools with no prompts or no sandbox. Use when the user asks whether their MCP servers are safe, to review an .mcp.json or client config, or to audit MCP exposure.
- License
- Apache-2.0
Pinned to revision e42d0d569d9b, so it is the text this page describes rather than whatever the author pushed since.
Files
Every link opens the file at its source, pinned to the revision this page describes.