Security Audit Tool MCP Server

@qianniuspace

Basic information

About Security Audit Tool MCP Server

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

#npm #security #audit #model-context-protocol

Security Audit Tool MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-security-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@qianniuspace/mcp-security-audit",
        "--client",
        "claude"
      ]
    }
  }
}

Security Audit Tool MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Security Audit Tool?

Security Audit Tool is an MCP (Model Context Protocol) server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry to perform real-time security checks and is designed for developers using MCP-compatible clients like Cline or Cursor.

How to use Security Audit Tool?

You can install Security Audit Tool via Smithery (npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude) or by adding an MCP configuration to your client. For NPX, add a JSON entry with command npx and args ["-y", "mcp-security-audit"]. Alternatively, download the source, build, and point to the built index.js.

Key features of Security Audit Tool

Real-time security vulnerability scanning
Remote npm registry integration
Detailed vulnerability reports with severity levels
Support for critical, high, moderate, and low severities
Compatibility with npm, pnpm, and yarn package managers
Automatic fix recommendations with CVSS and CVE references

Use cases of Security Audit Tool

Audit npm package dependencies before deployment
Integrate security checks into CI/CD pipelines via MCP
Obtain detailed vulnerability reports with severity and fix guidance
Automate dependency vulnerability scanning within MCP-compatible tools

Frequently asked questions

What does Security Audit Tool scan?

It scans npm package dependencies for known security vulnerabilities using the remote npm registry.

What package managers are supported?

It is compatible with npm, pnpm, and yarn.

What information does the report include?

Reports include severity level, CVE references, CVSS score, fix recommendations, and fixed version if available.

Does the tool require authentication?

No authentication is mentioned; it uses public npm registry data.

How is the tool integrated with clients?

It is configured as an MCP server via the `mcpServers` JSON object in clients like Cline or Cursor.

Comments

More Developer Tools MCP servers

offprompt

MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

Just Domain.

Just.

Just Domain is the domain registrar for businesses built with AI. An AI assistant checks availability and both prices, first year and renewal, and hands back a checkout link for justdomain.ai. Read only by design: no pur

Meticulous

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.