mcpbeat Sign in

MCP Security & Vulnerability Auditor MCP Server

answering

MCP Security & Vulnerability Auditor is answering right now. Last checked 2 min ago. It exposes 1 tools. Last commit 12 Sep 2026.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Uptime history 45 hours of history · worst hour 0%
45 hours agonow
1.6%
Uptime 24h
3 of 184 checks
1
Tools
read from the server
697 ms
Response time
average over 24h
0
Stars
last commit 12 Sep 2026

What the code does

We read the source, 22 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        subprocess.run(
                                is_shell = True

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

run in your terminal
claude mcp add mcp-security-auditor --transport http https://neoninnovationlab.com/api/mcp-security
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-security-auditor": {
      "url": "https://neoninnovationlab.com/api/mcp-security"
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-security-auditor]
url = "https://neoninnovationlab.com/api/mcp-security"
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-security-auditor": {
      "url": "https://neoninnovationlab.com/api/mcp-security"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "mcp-security-auditor": {
      "url": "https://neoninnovationlab.com/api/mcp-security"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit
audit_mcp_security
Audits an MCP server or GitHub repository for security vulnerabilities (CWE-78 Command Injection, CWE-798 Secret Leaks, CWE-22 Path Traversal, CWE-306 Missing Auth). Returns Trust Score (0-100), Letter Grade, and remediation steps.

Endpoints

URLTransportStateLatencyChecked
https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcp streamable-http answering 387 ms 2 min ago
https://neoninnovationlab.com/api/mcp-security sse answering 606 ms 2 min ago

Alternatives to MCP Security & Vulnerability Auditor

same job, measured the same way
Shellward
by jnmetacode

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

235 installs/wk local only
C
MCP Safeguard
by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

125 installs/wk local only
Mcpshield
by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

42 installs/wk local only
I
Agent Security Scanner
by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

113 installs/wk local only
Promptrejectormcp
by revsmoke

Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.

24 installs/wk local only
MCPAmpel - MCP Security Scanner
by diemoeve

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

69 installs/wk local only
Bawbel Scanner
by bawbel

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

176 installs/wk local only
Bawbel Scanner
by bawbel

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

local only

MCP Security & Vulnerability Auditor — questions

Answers built from our own checks of this server.

What can MCP Security & Vulnerability Auditor do?
It exposes 1 tools, read directly from the server on our last check. Among them: audit_mcp_security. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is MCP Security & Vulnerability Auditor working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 3 of 184 checks got a reply (1.6%), average response time 697 ms. The bar chart above shows every period we have measured.
How do I connect MCP Security & Vulnerability Auditor?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does MCP Security & Vulnerability Auditor need an API key?
No. MCP Security & Vulnerability Auditor completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is MCP Security & Vulnerability Auditor?
It answers our handshake in 697 ms on average, which is faster than 17% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is MCP Security & Vulnerability Auditor open source?
We cannot say either way: written in Python and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.