Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.
Audit MCP servers from inside Claude Code. 10 OWASP checks, A-F grade, live leaderboard.
When running as an MCP server, MCPWatch exposes the following tools to your AI agent:
scan_mcp_server / CLI) - No API key required for public leaderboard lookupsCompare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| scan_mcp_server | Scan a local MCP server by path — returns grade + per-check findings |
| get_public_score | Fetch the live grade for any public MCP server by owner/repo slug |
| list_leaderboard | Return the top/bottom N servers from the public leaderboard |
| explain_check | Get a detailed explanation of any OWASP MCP Top 10 check by ID |
{
"mcpServers": {
"mcpwatch": {
"command": "npx",
"args": ["-y", "mcpwatch-mcp"]
}
}
}Configuration as documented by the project. Restart the client after saving.
scan_mcp_server / CLI) - No API key required for public leaderboard lookupsRead, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
An MCP server for working with Spline 3D design tool API
MCP server for Solhint — lint and autofix Solidity smart contracts from any MCP client
This is a template for using agent mode with MCP servers to do research driven development based on specs
Generate MCP servers from natural language, OpenAPI specs, or database schemas.