{"repo":"makalin/SecureMCP","free":true,"listed":false,"github":"https://github.com/makalin/SecureMCP","clone":"git clone https://github.com/makalin/SecureMCP.git","description":"SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks.","language":"Go","stars":140,"topics":["ai-security","cli-tool","golang","llm-security","mcp","oauth","prompt-injection","security-scanner","cli-tools"],"license":"MIT","category":"mcp-servers","readme_excerpt":"SecureMCP SecureMCP is a comprehensive security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the Model Context Protocol (MCP). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool poisoning attacks. --- 🛡️ Features OAuth Token Scanner - Token format validation and security checks - Expiration and scope analysis - Storage security assessment - Token endpoint validation - JWT token analysis Prompt Injection Tester - Multiple injection payload types - Various injection positions testing - Response analysis - System prompt override detection - Role confusion attack detection Authentication & Server Integrity Check - SSL/TLS configuration validation - Authentication method testing - Security header verification - Server security assessment - HSTS and CSP validation Report Generation - HTML and JSON report formats - Vulnerability classification - Severity assessment - Remediation suggestions - Summary statistics --- 👨‍💻 Who Should Use SecureMCP? - AI Developers integrating MCP in applications - Security teams securing AI model interactions - DevSecOps engineers embedding MCP in CI/CD pipelines - Researchers studying AI model vulnerabilities - Security auditors assessing MCP implementations --- 🚀 Getting Started Prerequisites - Go 1.21+ - Docker (optional, for containerized deployment) - Node.js (for dashboard UI) Installation From Source Using Docker Basic Usage ","default_branch":null,"files":null,"tree":[],"storefront":"/r/makalin","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/makalin/SecureMCP/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}