MCP Security & Vulnerability Auditor is answering right now. Last checked 10 min ago. It exposes 1 tools. Last commit 19 Sep 2026.
Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
We read the source, 6 d ago · tools taken from the live server · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
subprocess.run(
is_shell = True
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
claude mcp add mcp-security-auditor --transport sse https://neoninnovationlab.com/api/mcp-security
https://neoninnovationlab.com/api/mcp-security
[mcp_servers.mcp-security-auditor]
url = "https://neoninnovationlab.com/api/mcp-security"
{
"mcpServers": {
"mcp-security-auditor": {
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}
{
"servers": {
"mcp-security-auditor": {
"type": "sse",
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}
This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
audit_mcp_security
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcp | streamable-http | answering | 375 ms | 12 min ago |
| https://neoninnovationlab.com/api/mcp-security | sse | answering | 517 ms | 10 min ago |
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
Security scanner for MCP servers - detects tool poisoning and injection
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections
Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.
Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs
Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.
Answers built from our own checks of this server.