Security Audit Tool MCP Server

@qianniuspace

代码仓库主页

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

qianniuspace

关于 Security Audit Tool MCP Server

A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

#npm #security #audit #model-context-protocol

Security Audit Tool MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-security-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@qianniuspace/mcp-security-audit",
        "--client",
        "claude"
      ]
    }
  }
}

Security Audit Tool MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Security Audit Tool?

Security Audit Tool is an MCP (Model Context Protocol) server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry to perform real-time security checks and is designed for developers using MCP-compatible clients like Cline or Cursor.

How to use Security Audit Tool?

You can install Security Audit Tool via Smithery (npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude) or by adding an MCP configuration to your client. For NPX, add a JSON entry with command npx and args ["-y", "mcp-security-audit"]. Alternatively, download the source, build, and point to the built index.js.

Key features of Security Audit Tool

Real-time security vulnerability scanning
Remote npm registry integration
Detailed vulnerability reports with severity levels
Support for critical, high, moderate, and low severities
Compatibility with npm, pnpm, and yarn package managers
Automatic fix recommendations with CVSS and CVE references

Use cases of Security Audit Tool

Audit npm package dependencies before deployment
Integrate security checks into CI/CD pipelines via MCP
Obtain detailed vulnerability reports with severity and fix guidance
Automate dependency vulnerability scanning within MCP-compatible tools

常见问题

What does Security Audit Tool scan?

It scans npm package dependencies for known security vulnerabilities using the remote npm registry.

What package managers are supported?

It is compatible with npm, pnpm, and yarn.

What information does the report include?

Reports include severity level, CVE references, CVSS score, fix recommendations, and fixed version if available.

Does the tool require authentication?

No authentication is mentioned; it uses public npm registry data.

How is the tool integrated with clients?

It is configured as an MCP server via the `mcpServers` JSON object in clients like Cline or Cursor.

开发工具分类下的更多 MCP 服务器

Agent Conductor

icohangar-ops

Agent conductor — AGENTS.md contract parser, SKILL.md registry, CHP decision engine over MCP

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

Kaiva Bridge

Kaiva Bridge turns your API, database or documents into a managed MCP server for Claude, ChatGPT, Cursor and VS Code. Point it at an OpenAPI or Swagger spec, an API docs link, a cURL command, a Postman collection, a Grap

FARPY

mangomunchr

Verified distributed compute for humans, applications, and agents. Submit Blender, Octane, and video workloads, route them across qualified GPUs, track asynchronous execution, download finished artifacts, and verify FARP