mcpbeat Sign in

MCP Codeaudit MCP Server

local only

MCP Codeaudit runs on your own machine — the client starts it, so there is no endpoint to ping. 23 installs a week from npm.

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 12 · avg 4 · +41% w/w
a month agotoday
23
Installs / week
npm · @infoinlet/mcp-codeaudit
Stars
on GitHub
Last commit
0 releases in 90 days
License
language unknown

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add mcp-codeaudit -- npx -y @infoinlet/mcp-codeaudit
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "mcp-codeaudit": {
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ],
      "command": "npx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.mcp-codeaudit]
command = "npx"
args = ["-y", "@infoinlet/mcp-codeaudit"]
.cursor/mcp.json
{
  "mcpServers": {
    "mcp-codeaudit": {
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ],
      "command": "npx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "mcp-codeaudit": {
      "args": [
        "-y",
        "@infoinlet/mcp-codeaudit"
      ],
      "command": "npx"
    }
  }
}

Alternatives to MCP Codeaudit

same job, measured the same way
LeakRank Guard
by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

56 installs/wk local only
Release Gate
by vamsisudhakaran1

Pre-deploy security auditor for AI agent code — the risks generic SAST misses.

253 installs/wk local only
Code Guard MCP
by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

44 installs/wk local only
Rune
by thecolourfoundation

Evidence-traced codebase understanding and security scanning for AI agents over MCP.

24 installs/wk local only
Secretguard MCP
by vladimirbakalov

Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.

local only
GuardianShield
by sparkvibe-io

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

82 installs/wk local only
AgentAegis
by astafford8488

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

28 tools answering
Clawhub
by maxz712

Git hosting for AI agents: repos, changes, focused diffs, reviews, issues, code search.

17 installs/wk local only

MCP Codeaudit — questions

Answers built from our own checks of this server.

Why is there no uptime for MCP Codeaudit?
MCP Codeaudit runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @infoinlet/mcp-codeaudit was installed 23 times last week.
Is MCP Codeaudit still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect MCP Codeaudit?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @infoinlet/mcp-codeaudit straight from npm; nothing to host, nothing to sign up for.
How many people use MCP Codeaudit?
The npm package @infoinlet/mcp-codeaudit was installed 23 times in the last week. Week over week that is +41%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.