auditor
Verified Safeby deepsweep-ai
Overview
A free CLI tool for auditing MCP (Model Context Protocol) servers to detect memory and tool poisoning vulnerabilities.
Installation
npx @deepsweepai/auditor audit --demoEnvironment Variables
- DEEPSWEEP_API_KEY
- DEEPSWEEP_API_URL
- DEEPSWEEP_TELEMETRY
Security Notes
The auditor is a security tool designed to find vulnerabilities. Its internal implementation avoids common security pitfalls. It uses `eval` and similar patterns for detection purposes only, not for its own execution. Network calls for telemetry and report sharing are optional/opt-out and explicitly anonymize sensitive data. API keys are handled as environment variables. Overall, the tool itself appears robust and follows good security practices for an auditing utility.
Similar Servers
mcp-server-csdn
The server automatically publishes Markdown articles to the CSDN platform, acting as a tool called by a Spring AI agent.
ancplua-mcp
This project provides C#/.NET Model Context Protocol (MCP) servers that expose a robust set of development tools for filesystem, Git, CI, Roslyn code analysis, and multi-AI orchestration, designed for integration into AI-assisted development workflows.
cue
Provides a Model Context Protocol (MCP) server for preprocessing prompts and integrating tools within agentic AI workflows.
mcp-server
This server acts as an API Gateway, aggregating multiple external OpenAPI-defined services (like Petstore and Tenable) into a single unified endpoint using the FastMCP framework.