1. Conduid
  2. Security
  3. Defensive MCP Audit
MCP server · Security

Defensive MCP Audit

by · github.com/Stijnman/defensive-mcp-audit

Defensive security audit tool for AI Agent and MCP (Model Context Protocol) environments. Detects risky localhost exposure, weak bindings, and confused-deputy risks. Lightweight, SARIF + HTML reports, skill-ready.

Unclaimed ai-agentsaudit-toolclaudecursordefensive-securitygithub-actionslocalhostmcpmodel-context-protocolpythonsarifsecurity
InstallView source
34Low

Scored a month ago · breakdown

About Defensive MCP Audit

Defensive MCP Audit is an MCP server published by Stijnman in the Security category: defensive security audit tool for AI Agent and MCP (Model Context Protocol) environments. Detects risky localhost exposure, weak bindings, and confused-deputy risks. Lightweight, SARIF + HTML reports, skill-ready.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/Stijnman/defensive-mcp-audit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Defensive MCP Audit

Powered by Claude · Grounded in docs

I know everything about Defensive MCP Audit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.3.2v0.3.2 · 23 Jun 2026Full Changelog**: https://github.com/Stijnman/defensive-mcp-audit/compare/v0.3.1...v0.3.2
v0.3.1v0.3.1 — GitHub polish & composite Action · 23 Jun 2026What's new Composite GitHub Action** — `uses: Stijnman/defensive-mcp-audit/action@v0.3.1` Issue & PR templates, SECURITY.md, Dependabot, CODEOWNERS Release workflow with wheel/sdist attachments README redesign with badges, finding table,…
v0.3.0v0.3.0 · 23 Jun 2026Smarter MCP audit: process classification, weighted scoring, MCP config parsing, plugin architecture, unit tests, and self-contained HTML reports.
Questions

About Defensive MCP Audit

How do I install Defensive MCP Audit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Defensive MCP Audit safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Defensive MCP Audit still maintained?

Yes — the latest release is v0.3.2 (23 Jun 2026), and the last commit was 3 months ago. The repository has 0 stars.