About Audit
Audit is an MCP server published by mkokoulin in the AI category: mcp-audit — A Go tool for auditing Model Context Protocol (MCP) servers.
The repository has 2 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.
Install
git clone https://github.com/mkokoulin/mcp-auditThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about Audit
Powered by Claude · Grounded in docs
Security checks
Static checks derived from the repository 5 days ago. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- !License declaredNo license file. Legally you have no right to use it in a product.
- !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
mcp-audit
mcp-audit — A Go tool for auditing Model Context Protocol (MCP) servers.
Features
- 🔍 Probe — runs the target MCP server and inspects supported features via JSON-RPC (
tools,resources,prompts,sampling, transports). - 📝 Scan — statically analyzes TypeScript source code (AST) to detect declared MCP APIs and transport usage.
CLI flags
-cwd is the local path of the project.
-github — GitHub is the URL for auto-cloning.
-args — additional arguments for the server.
-timeout — request timeout.
-startup-delay — delay before initialize.
-env — passing environment variables.
-ProtocolVersion is the version of the MCP protocol.
-out is the report format.
example
go run ./cmd/mcp-probe \
-github "https://github.com/upstash/context7" \
-out json \
-timeout 90s -startup-delay 2s
output format
{
"MCP Protocol Support": {
"HTTP Transport": true,
"Logging": false,
"OAuth2 Auth": false,
"Prompts": false,
"Resources": false,
"Roots": false,
"SSE Transport": false,
"STDIO Transport": true,
"Sampling": false,
"Tools": false
}
}
README fetched from the repository 5 days ago. The original is authoritative.