mcpbeat Sign in

MCP Security & Vulnerability Auditor MCP Server

answering

MCP Security & Vulnerability Auditor is answering right now. Last checked 10 min ago. It exposes 1 tools. Last commit 19 Sep 2026.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Uptime history 47 days of history · worst day 0%
47 days agonow
50.0%
Uptime 24h
91 of 182 checks
1
Tools
read from the server
544 ms
Response time
average over 24h
0
Stars
last commit 19 Sep 2026

What the code does

We read the source, 6 d ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        subprocess.run(
                                is_shell = True

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add mcp-security-auditor --transport sse https://neoninnovationlab.com/api/mcp-security
Settings → Connectors → Add custom connector, then paste this address
https://neoninnovationlab.com/api/mcp-security
~/.codex/config.toml
[mcp_servers.mcp-security-auditor]
url = "https://neoninnovationlab.com/api/mcp-security"
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-security-auditor": {
      "url": "https://neoninnovationlab.com/api/mcp-security"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-security-auditor": {
      "type": "sse",
      "url": "https://neoninnovationlab.com/api/mcp-security"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit
audit_mcp_security
Audits an MCP server or GitHub repository for security vulnerabilities (CWE-78 Command Injection, CWE-798 Secret Leaks, CWE-22 Path Traversal, CWE-306 Missing Auth). Returns Trust Score (0-100), Letter Grade, and remediation steps.

Endpoints

URLTransportStateLatencyChecked
https://neon_innovation_lab--mcp-security-auditor.apify.actor/mcp streamable-http answering 375 ms 12 min ago
https://neoninnovationlab.com/api/mcp-security sse answering 517 ms 10 min ago

Alternatives to MCP Security & Vulnerability Auditor

same job, measured the same way
Shellward
by jnmetacode

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

404 installs/wk local only
M
MCP Safeguard
by cognivators

MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.

195 installs/wk local only
Mcpshield
by mcpshield-dev

Security scanner for MCP servers - detects tool poisoning and injection

43 installs/wk local only
Agent-Shield
by startekenterprises-ai

Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.

answering
GenPark SQL Injection AST Taint Analyzer
by alphaparkinc

Dynamic SQL AST taint tracking and static vulnerability auditor detecting tautology injections

local only
A
Agent Security Scanner
by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

102 installs/wk local only
Sentrint
by sentrint

Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs

answering
Promptrejectormcp
by revsmoke

Security gateway for AI agents: detects prompt injections, jailbreaks, and common vulnerabilities.

63 installs/wk local only

MCP Security & Vulnerability Auditor — questions

Answers built from our own checks of this server.

What can MCP Security & Vulnerability Auditor do?
It exposes 1 tools, read directly from the server on our last check. Among them: audit_mcp_security. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is MCP Security & Vulnerability Auditor working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 182 checks got a reply (50.0%), average response time 544 ms. The bar chart above shows every period we have measured.
How do I connect MCP Security & Vulnerability Auditor?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does MCP Security & Vulnerability Auditor need an API key?
No. MCP Security & Vulnerability Auditor completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is MCP Security & Vulnerability Auditor?
It answers our handshake in 544 ms on average, which is faster than 22% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is MCP Security & Vulnerability Auditor open source?
The code is open source: it is published under the MIT licence, written in Python and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at neon_innovation_lab--mcp-security-auditor.apify.actor, which runs on its operator's own terms.