Security Audit Tool MCP Server

@qianniuspace

リポジトリホームページ

基本情報

カテゴリ

開発者ツール

ライセンス

MIT

トランスポート

stdio

作者

qianniuspace

Security Audit Tool MCP Server について

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

#npm #security #audit #model-context-protocol

Security Audit Tool MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-security-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@qianniuspace/mcp-security-audit",
        "--client",
        "claude"
      ]
    }
  }
}

Security Audit Tool MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Security Audit Tool?

Security Audit Tool is an MCP (Model Context Protocol) server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry to perform real-time security checks and is designed for developers using MCP-compatible clients like Cline or Cursor.

How to use Security Audit Tool?

You can install Security Audit Tool via Smithery (npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude) or by adding an MCP configuration to your client. For NPX, add a JSON entry with command npx and args ["-y", "mcp-security-audit"]. Alternatively, download the source, build, and point to the built index.js.

Key features of Security Audit Tool

Real-time security vulnerability scanning
Remote npm registry integration
Detailed vulnerability reports with severity levels
Support for critical, high, moderate, and low severities
Compatibility with npm, pnpm, and yarn package managers
Automatic fix recommendations with CVSS and CVE references

Use cases of Security Audit Tool

Audit npm package dependencies before deployment
Integrate security checks into CI/CD pipelines via MCP
Obtain detailed vulnerability reports with severity and fix guidance
Automate dependency vulnerability scanning within MCP-compatible tools

よくある質問

What does Security Audit Tool scan?

It scans npm package dependencies for known security vulnerabilities using the remote npm registry.

What package managers are supported?

It is compatible with npm, pnpm, and yarn.

What information does the report include?

Reports include severity level, CVE references, CVSS score, fix recommendations, and fixed version if available.

Does the tool require authentication?

No authentication is mentioned; it uses public npm registry data.

How is the tool integrated with clients?

It is configured as an MCP server via the `mcpServers` JSON object in clients like Cline or Cursor.

「開発者ツール」の他のコンテンツ

Mobbin

Mobbin MCP connects your AI agents to 600,000+ real product screens, so what they build starts with what already works.

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP