mcpbeat Sign in

MCP Codeaudit MCP Server

local only

MCP Codeaudit runs on your own machine — the client starts it, so there is no endpoint to ping. 51 installs a week from npm.

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 13 · avg 4 · +240% w/w
a month agotoday
51
Installs / week
npm · @infoinlet/mcp-codeaudit
—
Stars
on GitHub
—
Last commit
no releases in 90 days
—
License
language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-codeaudit -- npx -y @infoinlet/mcp-codeaudit
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-codeaudit": {
      "command": "npx",
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-codeaudit]
command = "npx"
args = ["-y", "@infoinlet/mcp-codeaudit"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-codeaudit": {
      "command": "npx",
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "mcp-codeaudit": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ]
    }
  }
}

Alternatives to MCP Codeaudit

same job, measured the same way
G
grim-mcp
by abduljabbarbxr

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

206 installs/wk local only
VibeDoctor
by vibedoctor

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

1 tools answering
Jikida
by jikida

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

147 installs/wk local only
LeakRank Guard
by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

70 installs/wk local only
Codebase Doctor
by subhajitlucky

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

453 installs/wk local only
Release Gate
by vamsisudhakaran1

Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

251 installs/wk local only
Code Guard MCP
by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

87 installs/wk local only
CodeKnight
by boea-tnmf-group

Code review for diffs: rule-based checks for leaked secrets, unsafe migrations and more.

answering

MCP Codeaudit — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP Codeaudit?
MCP Codeaudit runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @infoinlet/mcp-codeaudit was installed 51 times last week.
Is MCP Codeaudit still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect MCP Codeaudit?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @infoinlet/mcp-codeaudit straight from npm; nothing to host, nothing to sign up for.
How many people use MCP Codeaudit?
The npm package @infoinlet/mcp-codeaudit was installed 51 times in the last week. Week over week that is +240%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.