Your MCP Config Is the Actual Security Boundary. Nobody Audits It

Описание и применение

mcp-audit сканирует конфигурации MCP‑серверов, выявляя опасные команды stdio, незащищённые конечные точки, открытые адреса и известные уязвимости CVE, а также автоматически применяет исправления.

Задача

MCP server configurations are hand‑edited JSON files that define the security boundary, yet existing scanners only lint design or flag risky patterns without checking for known CVEs or providing fixes.

Результат

mcp-audit identifies and remediates critical security issues in MCP configs, such as unsafe stdio commands, unauthenticated endpoints, and vulnerable package versions, improving the security posture of locally run MCP servers.

Рабочий процесс

• 1. Install the tool: pip install mcp-runtime-audit mcp-audit scan
• 2. Run a scan: mcp-audit scan (optionally with --probe to test endpoints)
• 3. Review findings in text or JSON output
• 4. Apply fixes: mcp-audit fix --apply (dry‑run with --dry-run first)
• 5. Optionally link agent‑guard: mcp-audit scan --link-agent-guard

Доказательства

So I built mcp-audit — a local runtime security scanner for MCP servers with a bundled CVE table and one‑click fixes. stdlib only, no dependencies.

Источник

Every finding carries a rule id, CVE id, severity, the evidence, and the fix — in text and JSON output, with CI‑ready exit codes (0 clean, 1 findings, 2 errors).

Источник

The tool rewrites 0.0.0.0 → 127.0.0.1 in URLs, flags, and env values, adds an Authorization: Bearer ${MCP_TOKEN} placeholder to unauthenticated endpoints, backs up the config to <file>.bak‑<timestamp> before writing anything.

Источник