mcp-audit
Verified Safeby littlebearapps
Overview
Tracking and analysis of MCP tool usage and token costs across multiple AI coding platforms (Claude Code, Codex CLI, Gemini CLI), with a programmatic MCP server for real-time metrics, optimization recommendations, and configuration analysis.
Installation
token-audit-serverEnvironment Variables
- HF_TOKEN
Security Notes
The project demonstrates strong security awareness. It includes explicit path validation (`validate_config_path`) to restrict file access to known, safe directories, preventing path traversal. Credential detection (`credential_detector.py`) is implemented, and sensitive values are redacted in output. External calls to `git` are for metadata collection, captured, and not executed, limiting risk. Tarball extraction for the Gemma tokenizer includes `_validate_tarball_member` to prevent path traversal attacks. The MCP server interfaces sanitize inputs and outputs. The main risks are contained by robust internal controls.
Similar Servers
octocode-mcp
The Octocode Research server enables AI agents to perform expert code forensics and deep-dive research across local filesystems (LSP, ripgrep, file I/O) and external GitHub repositories (code search, repo structure, pull requests, package search). It's optimized for architectural analysis, pattern discovery, and implementation planning.
Lynkr
Lynkr is an AI orchestration layer that acts as an LLM gateway, routing language model requests to various providers (Ollama, Databricks, OpenAI, etc.). It provides an OpenAI-compatible API and enables AI-driven coding tasks via a rich set of tools and a multi-agent framework, with a strong focus on security, performance, and token efficiency. It allows AI agents to interact with a defined workspace (reading/writing files, executing shell commands, performing Git operations) and leverages long-term memory and agent learning to enhance task execution.
ncp
NCP acts as a universal adapter and orchestrator for Model Context Protocol (MCP) servers and tools. It provides a unified interface for discovery, execution, and management of diverse tools (local CLI, HTTP APIs, internal plugins/Photons, AI skills) through natural language and structured code interaction, enabling AI agents to interact with the broader digital ecosystem.
responsible-vibe-mcp
Manages conversation state and guides LLM coding agents through structured software development workflows with long-term project memory and multi-agent collaboration.