Works as a CLI tool (mcp-audit) or as an MCP server itself (mcp-security-audit).
MCP Security Audit — AI/ML Vulnerability ScannerMcp Security Audit is an MCP project maintained in the luciferforge/mcp-security-audit repository. The maintainer describes its purpose as “Works as a CLI tool (mcp-audit) or as an MCP server itself (mcp-security-audit)”. Read the project documentation for the complete scope.
The documented pypi package is mcp-security-audit. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| audit_scan | Full security audit with text report |
| audit_quick_scan | Quick scan — score, grade, top findings |
| audit_classify | Classify a single tool's risk level |
| audit_check_text | Scan text for injection patterns |
{
"mcpServers": {
"mcp-security-audit": {
"command": "uvx",
"args": [
"mcp-security-audit"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Queries the NIST National Vulnerability Database (NVD) via its API.
Scans projects for security vulnerabilities and automatically updates vulnerable dependencies using Trivy.
Search 1,032 verified smart contract vulnerability findings from Sherlock audits by pattern.
Remote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
A comprehensive Model Context Protocol (MCP) server for ABP.IO framework with 48+ tools for application development, UI generation, and management