1. Conduid
  2. Maps
  3. mcp-tool-auditor
MCP server · Maps

mcp-tool-auditor

· github.com/perparimmjeku/mcp-auditor

MCP Tool Poisoning Scanner — Defensive scanning + offensive pentest tooling for MCP servers. Maps to OWASP MCP Top 10.

Unclaimed maps
InstallView source
37Low

Scored 3 months ago · breakdown

About mcp-tool-auditor

mcp-tool-auditor is an MCP server in the Maps category: mCP Tool Poisoning Scanner — Defensive scanning + offensive pentest tooling for MCP servers. Maps to OWASP MCP Top 10.

Install

uvx
uvx mcp-tool-auditor
pip
pip install mcp-tool-auditor

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

ATPA ServerBehavioral poisoning that becomes malicious after a configurable threshold

Parameters not published.

Description Injection ServerClassic Tool Poisoning Attacks using malicious tool descriptions

Parameters not published.

FSP GeneratorCyberArk-style schema poisoning variants

Parameters not published.

Rug-Pull ServerServes clean tools initially, then swaps to malicious definitions

Parameters not published.

STI Simulation ServerBenign tool definitions; injects a chat-template control token into responses after a configurable call threshold

Parameters not published.

Ask AI

✦

Ask AI about mcp-tool-auditor

Powered by Claude · Grounded in docs

I know everything about mcp-tool-auditor. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About mcp-tool-auditor

How do I install mcp-tool-auditor?

Run uvx mcp-tool-auditor, then add the server to your MCP client's configuration.

Is mcp-tool-auditor safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is mcp-tool-auditor still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.