{"repo":"apisec-inc/mcp-audit","free":true,"listed":false,"github":"https://github.com/apisec-inc/mcp-audit","clone":"git clone https://github.com/apisec-inc/mcp-audit.git","description":"See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.","language":"Python","stars":153,"topics":["ai","ai-security","claude","cursor","mcp","secrets-detection","security","ai-bom","api-inventory","agent-security"],"license":"MIT","category":"mcp-servers","readme_excerpt":"MCP Audit See what your AI agents can access - before they go live. Web App CLI Quick Start What It Does MCP Audit scans your AI development tools (Claude Desktop, Cursor, VS Code) and reveals: - Secrets - Exposed API keys, tokens, database passwords - APIs - Every endpoint your AI agents connect to - AI Models - Which LLMs are configured (GPT-4, Claude, Llama) - Risk Flags - Shell access, filesystem access, unverified sources Source-level Scanning (new in v1.1) mcp-audit scan inventories MCP server configurations . The new mcp-audit source-scan command goes one level deeper — it reads the MCP server's own source code and flags code-level vulnerabilities the server author may have introduced. Today it catches the \"Prompt In, Shell Out\" attack chain: an MCP server that pipes an LLM-controlled tool argument into a shell-spawning API ( child process.exec , util.promisify(exec) , subprocess.run(shell=True) , os.system , os.popen ) without sanitization. An attacker controlling the LLM input can inject shell metacharacters and execute arbitrary code on the host running the MCP server. Outputs: - --format table (default, human-readable) - --format json (CI integrations, jq pipelines) - --format sarif (upload to GitHub code-scanning / GitLab / similar) Gate merges on critical findings: The scanner is intentionally narrow — it only opens files that look like MCP server source (imports an MCP SDK). It won't try to find shell-injection bugs in random Node / Python code; that's not the j","default_branch":null,"files":null,"tree":[],"storefront":"/r/apisec-inc","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/apisec-inc/mcp-audit/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}