Claude MarketplacesSubmit

Mcp Audit Server

joepangallo/mcp-audit-server

A thin proxy that routes security audit commands to a private backend, either self-hosted or managed at audit.leddconsulting.com. Exposes 10 MCP tools covering static config analysis, live server probing, prompt injection testing with 30+ payloads, agent trust scoring, dataflow tracing for PII leaks, package vulnerability scanning, and auto-remediation. The CLI mirrors those operations for CI or manual audits. All scan logic lives on the backend, so you need an API key for the hosted service or your own deployment. Useful if you're running multiple MCP servers in production and want centralized auditing without embedding heavy analysis code in every client config.

tools: 10
auth: Secret needed
transport: STDIO
env vars: 2
last updated: Aug 23, 2026

Tools

10 tools

Public tool metadata for what this MCP can expose to an agent.

audit_mcp_configStatic analysis of MCP config JSON for privilege, auth, transport, and launch risks

Static analysis of MCP config JSON for privilege, auth, transport, and launch risks

No parameter schema in public metadata yet.

audit_mcp_serverActive probing of a running MCP server over stdio (requires AGENT_SECURITY_ADMIN_MODE=1)

Active probing of a running MCP server over stdio (requires AGENT_SECURITY_ADMIN_MODE=1)

No parameter schema in public metadata yet.

audit_agent_trustTrust audit for tool permissions, execution provenance, secret exposure controls, policy drift, and deployment trust score

Trust audit for tool permissions, execution provenance, secret exposure controls, policy drift, and deployment trust score

No parameter schema in public metadata yet.

audit_prompt_injectionTests a system prompt against a 30+ payload injection catalog

Tests a system prompt against a 30+ payload injection catalog

No parameter schema in public metadata yet.

audit_agent_dataflowTraces PII and secret exposure through an agent's tool pipeline

Traces PII and secret exposure through an agent's tool pipeline

No parameter schema in public metadata yet.

scan_mcp_packageScans an npm MCP package for dependency vulnerabilities and dangerous patterns

Scans an npm MCP package for dependency vulnerabilities and dangerous patterns

No parameter schema in public metadata yet.

generate_reportCombines multiple audit results into a composite report with executive summary

Combines multiple audit results into a composite report with executive summary

No parameter schema in public metadata yet.

fix_mcp_configAuto-remediates config issues: removes unsafe flags, upgrades transport, redacts secrets

Auto-remediates config issues: removes unsafe flags, upgrades transport, redacts secrets

No parameter schema in public metadata yet.

harden_system_promptAppends injection-resistant guardrails to a system prompt

Appends injection-resistant guardrails to a system prompt

No parameter schema in public metadata yet.

generate_policyGenerates an enforceable JSON security policy from an MCP config

Generates an enforceable JSON security policy from an MCP config

No parameter schema in public metadata yet.

Sponsors

Promote your product hereReach 125k+ visitors monthly Promote your product hereReach 125k+ visitors monthly

Agent CaffeineSponsoredClose your lid, come back to finished work

SnugSponsoredThe clipboard manager for the AI era Promote your product hereReach 125k+ visitors monthly

WaxSponsoredBlock anything with supervision, without erasing your iPhone Promote your product hereReach 125k+ visitors monthly

knobsSponsoredSee your site on any phone, any day, in any language

Configuration

AGENT_SECURITY_API_KEY*secret

API key for the managed hosted audit backend

AGENT_SECURITY_BASE_URL

Optional HTTPS API origin for self-hosted or private deployments

Readme

mcp-audit-server

Thin MCP server and CLI proxy for AI agent and MCP security auditing. It connects to a private audit API to analyze MCP configurations, test prompt injection resistance, trace data flows, scan packages, and generate security policies.

This package is a thin proxy. All scan logic lives in a private backend operated by you or your provider.

Managed hosted flow:

set AGENT_SECURITY_API_KEY
the package will automatically target https://audit.leddconsulting.com

Self-hosted or private-network flow:

set AGENT_SECURITY_BASE_URL to your HTTPS API origin
or set AGENT_SECURITY_HOST and AGENT_SECURITY_PORT for a loopback/private deployment

Hosted backend access is not bundled with this package. If you want managed access or a licensed private deployment, contact Ledd Consulting.

Registry and Directories

View the full README on GitHub

Details

Repository: github.com/joepangallo/mcp-audit-server
Categories: AI & LLM Tools, Security & Pentesting
Package: ledd-mcp-audit-server
Transport: STDIO
Auth: Required
Registry: MCP registry, active

Related AI & LLM Tools MCP servers

1

Archangel Agency MCPjthora/archangel-agency-mcpUniversal Language briefings, FusionGirl context JSONs, service catalog, agent info. x402-enabled.0stars

2

Enterprise Internal Knowledge Base: Production-Ready RAG + MCPkimsb2429/internal-knowledge-baseProduction-ready RAG + MCP demo: eval-in-CI merge gate, Langfuse traces, structure-aware chunking.0stars

3

AgentCrushkristof-sudo/agentcrush-appMarket intelligence for the AI agent economy: rankings, trust signals, liveness. 13 tools.0stars

4

IBM Code Engine MCP Servermarkusvankempen/code-engine-mcp-serverDeploy to IBM Code Engine from Cursor, Copilot, Claude & Cline. Build, push, deploy via MCP.0stars

5

VoteShipmattkilmer/voteship-agent-toolkitManage feature requests, votes, roadmaps, and changelogs from any MCP client.0stars

6

Mercury X402 Mcpmercuryx402/mercury-x402-mcpAgent-payable web data over x402: 18 keyless services an agent pays per call.0stars