Security Audit Tool
@qianniuspace
About Security Audit Tool
A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
Basic information
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"mcp-security-audit": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@qianniuspace/mcp-security-audit",
"--client",
"claude"
]
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Security Audit Tool?
Security Audit Tool is an MCP (Model Context Protocol) server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry to perform real-time security checks and is designed for developers using MCP-compatible clients like Cline or Cursor.
How to use Security Audit Tool?
You can install Security Audit Tool via Smithery (npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude) or by adding an MCP configuration to your client. For NPX, add a JSON entry with command npx and args ["-y", "mcp-security-audit"]. Alternatively, download the source, build, and point to the built index.js.
Key features of Security Audit Tool
- Real-time security vulnerability scanning
- Remote npm registry integration
- Detailed vulnerability reports with severity levels
- Support for critical, high, moderate, and low severities
- Compatibility with npm, pnpm, and yarn package managers
- Automatic fix recommendations with CVSS and CVE references
Use cases of Security Audit Tool
- Audit npm package dependencies before deployment
- Integrate security checks into CI/CD pipelines via MCP
- Obtain detailed vulnerability reports with severity and fix guidance
- Automate dependency vulnerability scanning within MCP-compatible tools
FAQ from Security Audit Tool
What does Security Audit Tool scan?
It scans npm package dependencies for known security vulnerabilities using the remote npm registry.
What package managers are supported?
It is compatible with npm, pnpm, and yarn.
What information does the report include?
Reports include severity level, CVE references, CVSS score, fix recommendations, and fixed version if available.
Does the tool require authentication?
No authentication is mentioned; it uses public npm registry data.
How is the tool integrated with clients?
It is configured as an MCP server via the mcpServers JSON object in clients like Cline or Cursor.
More Developer Tools MCP servers
sentry-mcp
getsentryAn MCP server for interacting with Sentry via LLMs.
FastAPI-MCP
tadata-orgExpose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
test
prysmaticlabsGo implementation of Ethereum proof of stake
MCP Containers
metorialConnect any AI model to 1200+ integrations (MCP, CLI, API)
Serena
oraiosA powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent
Comments