MCP Config Auditor MCP Server

by guardbee Your server? Claim it

local only

MCP Config Auditor runs on your own machine — the client starts it, so there is no endpoint to ping. 540 installs a week from npm. Last commit 1 Nov 2026.

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

Installs per day peak 600 · avg 46 · -19% w/w

a month agotoday

540

Installs / week

npm · @guardbee/mcp-config-auditor

Stars

11 open issues

1 Nov 2026

Last commit

14 releases in 90 days

MIT

License

TypeScript

What the code does

We read the source, 23 h ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command packages/security-suite/src/cli.ts:48

  const result = spawnSync(process.execPath, [cliPath, entry.cmd, ...args], {

Touches key and credential files packages/guard-core/src/tool-poisoning.ts:53, packages/security-proxy/src/hooks/classify.ts:30

    pattern: /\b(?:read|cat|include|attach|append)\b[^.]{0,80}(?:\.ssh\b|\bid_rsa\b|\.env\b|\.aws[\\/]credentials\b|\bprivate[\s_-]?key\b|\.npmrc\b)/i,

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp-config-auditor -- npx -y @guardbee/mcp-config-auditor

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-config-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-config-auditor"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp-config-auditor]
command = "npx"
args = ["-y", "@guardbee/mcp-config-auditor"]

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-config-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-config-auditor"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp-config-auditor": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-config-auditor"
      ]
    }
  }
}

Alternatives to MCP Config Auditor

same job, measured the same way

MCP Config Auditor

by 4hmetuyar

Scans Cursor/Claude/Windsurf/VS Code MCP configs for unpinned versions, secrets, typosquats

local only

Humantextpro

by humantextpro

AI text detection and humanization for Claude Code, Cursor, and Windsurf.

41 installs/wk local only

Gency MCP

by gency

Gency AI product image generation - MCP server for Claude, Codex, Cursor, VS Code

176 installs/wk local only

Chalk

by appkitstudio

Chalk's bundled MCP server for drawing diagrams on macOS via Claude, Cursor, VS Code

local only

Aiko

by masa-san-jp

A portable persona for MCP clients — the same agent in Claude Code, Codex, Cursor and VS Code

315 installs/wk local only

Make0 Brain

by make0-official

One shared, versioned memory for Claude Code, Cursor, Codex and every MCP agent. Local and offline.

1 212 installs/wk local only

Azure FinOps MCP Server

by raviteja-pegata

Azure FinOps MCP: cost, budgets, forecasting and optimization for Claude, VS Code and Cursor.

98 installs/wk local only

GPTaria MCP

by gptaria-mcp

Post a project brief & publish cases on GPTaria from Claude Code, Cursor or Windsurf.

33 installs/wk local only

MCP Config Auditor — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP Config Auditor?

MCP Config Auditor runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @guardbee/mcp-config-auditor was installed 540 times last week.

How do I connect MCP Config Auditor?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @guardbee/mcp-config-auditor straight from npm; nothing to host, nothing to sign up for.

How many people use MCP Config Auditor?

The npm package @guardbee/mcp-config-auditor was installed 540 times in the last week. Week over week that is -19%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is MCP Config Auditor open source?

Yes — it is published under the MIT licence, written in TypeScript, 2 stars on GitHub and 11 open issues. The source link is on this page, so you can read exactly what it does with your data before you connect it.