auditor
Verified Safeby deepsweep-ai
Overview
A free CLI tool for auditing MCP (Model Context Protocol) servers to detect memory and tool poisoning vulnerabilities.
Installation
npx @deepsweepai/auditor audit --demoEnvironment Variables
- DEEPSWEEP_API_KEY
- DEEPSWEEP_API_URL
- DEEPSWEEP_TELEMETRY
Security Notes
The auditor is a security tool designed to find vulnerabilities. Its internal implementation avoids common security pitfalls. It uses `eval` and similar patterns for detection purposes only, not for its own execution. Network calls for telemetry and report sharing are optional/opt-out and explicitly anonymize sensitive data. API keys are handled as environment variables. Overall, the tool itself appears robust and follows good security practices for an auditing utility.
Similar Servers
mcp-server-csdn
The server automatically publishes Markdown articles to the CSDN platform, acting as a tool called by a Spring AI agent.
ancplua-mcp
Provides C#/.NET Model Context Protocol (MCP) servers to expose development tools for filesystem, Git, CI, Roslyn, and multi-AI orchestration workflows.
cue
An MCP server designed to front-load prompt engineering, transforming vague task descriptions into well-structured, optimized prompts for agentic workflows.
mcp-server
This server acts as an API Gateway, aggregating multiple external OpenAPI-defined services (like Petstore and Tenable) into a single unified endpoint using the FastMCP framework.