mcp-server-audit
MCP Server 配置安全审计器。把本机各宿主(Claude Code / Codex / Cursor / Windsurf / 项目级 .mcp.json)的 MCP server 配置集中采集,对每个 server 确定性标记风险形态 (shell 包装执行 / 包管理器拉取远端代码 / 凭据写进 URL / 明文 HTTP / 环境变量 暴露面 / 命令注入痕迹),再由 Agent 结合部署语境逐条做暴露面分析,输出分级清单 与加固建议。审查的是「配置给了 Agent 什么能力」,不是 server 的代码质量。 触发词: MCP 审计, MCP 安全, 检查 MCP 配置, MC
as observed 2026-11-10T19:47:06.700Z- Identifier
mcp-server-audit- Source
- ClawHub
- Version observed
- 1.1.0
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-11-09T18:46:25.521Z
- Observations recorded
- 2
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 131
- Declared license
- MIT-0
Observation history
2026-11-10T19:47:06.700Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"Auto-publish from commit 372c7d5b4e95f55f9e5c248d94669d82a9f1adb2" | "Auto-publish from commit ae3d95c96c4764722c81e08142cd406edd4af2c2" |
latestVersion |
"1.0.0" | "1.1.0" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.