Security Audit Tool MCP Server

@qianniuspace

代码仓库主页

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

qianniuspace

关于 Security Audit Tool MCP Server

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

#npm #security #audit #model-context-protocol

Security Audit Tool MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-security-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@qianniuspace/mcp-security-audit",
        "--client",
        "claude"
      ]
    }
  }
}

Security Audit Tool MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Security Audit Tool?

Security Audit Tool is an MCP (Model Context Protocol) server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry to perform real-time security checks and is designed for developers using MCP-compatible clients like Cline or Cursor.

How to use Security Audit Tool?

You can install Security Audit Tool via Smithery (npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude) or by adding an MCP configuration to your client. For NPX, add a JSON entry with command npx and args ["-y", "mcp-security-audit"]. Alternatively, download the source, build, and point to the built index.js.

Key features of Security Audit Tool

Real-time security vulnerability scanning
Remote npm registry integration
Detailed vulnerability reports with severity levels
Support for critical, high, moderate, and low severities
Compatibility with npm, pnpm, and yarn package managers
Automatic fix recommendations with CVSS and CVE references

Use cases of Security Audit Tool

Audit npm package dependencies before deployment
Integrate security checks into CI/CD pipelines via MCP
Obtain detailed vulnerability reports with severity and fix guidance
Automate dependency vulnerability scanning within MCP-compatible tools

常见问题

What does Security Audit Tool scan?

It scans npm package dependencies for known security vulnerabilities using the remote npm registry.

What package managers are supported?

It is compatible with npm, pnpm, and yarn.

What information does the report include?

Reports include severity level, CVE references, CVSS score, fix recommendations, and fixed version if available.

Does the tool require authentication?

No authentication is mentioned; it uses public npm registry data.

How is the tool integrated with clients?

It is configured as an MCP server via the `mcpServers` JSON object in clients like Cline or Cursor.

开发工具分类下的更多 MCP 服务器

Eased

easedui

Eased is a library of motion-first React components for shadcn, installed with the shadcn CLI.

DocuWriter.ai

DocuWriter is an AI-powered platform for creating, updating and managing complete, structured documentation for entire codebases. Teams can connect repositories and generate documentation covering architecture, modules,

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

DB Planner

CNC Software Solutions

Read and edit DB Planner database schemas (DBML/SQL), Mermaid diagrams and board layouts from any MCP client. 38 tools, OAuth sign-in, read and write as separate scopes enforced server-side.