MCP Codeaudit runs on your own machine — the client starts it, so there is no endpoint to ping. 51 installs a week from npm.
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
The linked repository no longer exists on GitHub — it was deleted or made private.
Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-codeaudit -- npx -y @infoinlet/mcp-codeaudit
{
"mcpServers": {
"mcp-codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}
[mcp_servers.mcp-codeaudit]
command = "npx"
args = ["-y", "@infoinlet/mcp-codeaudit"]
{
"mcpServers": {
"mcp-codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}
{
"servers": {
"mcp-codeaudit": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}
Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Pre-deploy security auditor for AI agent code — the risks generic SAST misses.
Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.
Code review for diffs: rule-based checks for leaked secrets, unsafe migrations and more.
Answers built from our own checks of this server.