How do I install the audit mcp cli mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `GITHUB_TOKEN` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Audit MCP Cli MCP Server

Lightweight dependency vulnerability audit tool with CLI and MCP Server support

Local serverstdio

What is the Audit MCP Cli MCP Server?

Lightweight dependency vulnerability audit tool with CLI and MCP Server support

What it actually does

A lightweight dependency vulnerability audit tool for Node.js projects. Supports CLI and MCP Server modes, covers npm and pnpm projects, and generates structured Markdown/HTML reports with full dependency chains.

Full dependency chains — — traces the complete path from your package.json to each vulnerable package
npm + pnpm support — — auto-detects package manager by lockfile
Remote GitHub audit — — audit any public or private repo without cloning
MCP Server — — integrates with AI coding assistants (Claude, Cursor, etc.)
Markdown / HTML reports — — clean, structured reports sorted by severity
CI gate — — --fail-on exit code for CI/CD pipelines

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Audit MCP Cli MCP Server

{
  "mcpServers": {
    "audit-mcp-cli": {
      "command": "npx",
      "args": [
        "-y",
        "audit-mcp-cli",
        "--mcp"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Example prompts to try

“Use Audit MCP Cli to Cursor.”

Frequently asked questions

Lightweight dependency vulnerability audit tool with CLI and MCP Server support Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Audit MCP Cli MCP Server

NVD Database

Queries the NIST National Vulnerability Database (NVD) via its API.

DatabasesPython★ 14

Cursor Trivy

Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.

Security & IdentityPython★ 10

3ilm-mcp

Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.

Security & Identity

A2adependencyinspector-mcp

Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi

Security & IdentityRemote

A2areplayreceipt-mcp

Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.