Audit AI runs on your own machine — the client starts it, so there is no endpoint to ping. 282 installs a week from npm.
Finds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.
Today is the operative word: we check Audit AI every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add auditai-mcp -- npx -y auditai-mcp
{
"mcpServers": {
"auditai-mcp": {
"args": [
"-y",
"auditai-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.auditai-mcp]
command = "npx"
args = ["-y", "auditai-mcp"]
{
"mcpServers": {
"auditai-mcp": {
"args": [
"-y",
"auditai-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"auditai-mcp": {
"args": [
"-y",
"auditai-mcp"
],
"command": "npx"
}
}
}
Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions
Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
Check a live app you own for public databases, leaked keys and exposed files.
Historical football results, draws and no-draw streaks. 11 read-only tools, 6 need no API key.
NSF Awards MCP — National Science Foundation award database (free, no auth)
No-code databases, forms, portals and AI sites. Manage records and automation via natural language.
No-code databases, forms, portals and AI sites. Manage records and automation via natural language.
No-code databases, forms, portals and AI sites. Manage records and automation via natural language.
Answers built from our own checks of this server.