Auditra is listed as active in the registry but did not answer our last check. Last commit 21 Aug 2026.
Read-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.
What the code does
We read the source, 7 h ago · rules 3dff92dd89df
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
require_once $file;
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
require_once $file;
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found things in this code
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Auditra and you get told the day something new turns up.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 12 min ago.
claude mcp add auditra --transport http https://{site_domain}/wp-json/auditra/v1/mcp/{token}{
"mcpServers": {
"auditra": {
"url": "https://{site_domain}/wp-json/auditra/v1/mcp/{token}"
}
}
}[mcp_servers.auditra]
url = "https://{site_domain}/wp-json/auditra/v1/mcp/{token}"{
"mcpServers": {
"auditra": {
"url": "https://{site_domain}/wp-json/auditra/v1/mcp/{token}"
}
}
}{
"mcpServers": {
"auditra": {
"url": "https://{site_domain}/wp-json/auditra/v1/mcp/{token}"
}
}
}Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://{site_domain}/wp-json/auditra/v1/mcp/{token} | streamable-http | answering | 1 ms | 12 min ago |
Alternatives to Auditra
same job, measured the same wayMCP server to scan smart contracts on Base for honeypots, rug pulls, and vulnerabilities.
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
Secure read-only MCP server for Slack workspaces
Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.
📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins
Auditra — questions
Answers built from our own checks of this server.