Elicitation Auditor MCP Server

by 4hmetuyar Your server? Claim it

local only

Elicitation Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 41 installs a week from npm. Last commit 11 Oct 2026.

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs

Installs per day peak 237 · avg 12 · -82% w/w

a month agotoday

Installs / week

npm · @guardbee/mcp-elicitation-auditor

Stars

0 open issues

11 Oct 2026

Last commit

2 releases in 90 days

—

License

TypeScript

Nothing serious here today

Today is the operative word: we check Elicitation Auditor every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add elicitation-auditor -- npx -y @guardbee/mcp-elicitation-auditor

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "elicitation-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-elicitation-auditor"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.elicitation-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-elicitation-auditor"]

.cursor/mcp.json

{
  "mcpServers": {
    "elicitation-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-elicitation-auditor"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "elicitation-auditor": {
      "args": [
        "-y",
        "@guardbee/mcp-elicitation-auditor"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Elicitation Auditor

same job, measured the same way

TrustScan

by entradox

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

4 tools answering

Aegis

by getaegis

Credential isolation for AI agents. Inject secrets at the network boundary.

59 installs/wk local only

Agent Firewall MCP

by mlawsonking

Input/output safety for AI agents: known-pattern injection and obfuscation scan, URL/IP, secrets.

79 installs/wk local only

Secure Vault

by mdfifty50-boop

Encrypted secrets and credential management for agents

31 installs/wk local only

Shadowgate MCP

by josephibra

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

answering

MCP Shield

by sophiacave

Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.

35 installs/wk local only

Cybersec Toolkit

by 26zl

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

local only

Akeyless Agentic Runtime Authority

by akeyless-community

Secretless database and cloud access via Akeyless RTA. Credentials never enter the model.

14 installs/wk local only

Elicitation Auditor — questions

Answers built from our own checks of this server.

Why is there no uptime for Elicitation Auditor?

Elicitation Auditor runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-elicitation-auditor was installed 41 times last week.

How do I connect Elicitation Auditor?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @guardbee/mcp-elicitation-auditor straight from npm; nothing to host, nothing to sign up for.

How many people use Elicitation Auditor?

The npm package @guardbee/mcp-elicitation-auditor was installed 41 times in the last week. Week over week that is -82%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Elicitation Auditor open source?

We cannot say either way: written in TypeScript and 1 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.