darshjme/mcp-security-audit
MCP server security audit tool — detects tool poisoning (CVE-2025-6514), prompt injection, and unsafe patterns. 13 tests.
Platform-specific configuration:
{
"mcpServers": {
"mcp-security-audit": {
"command": "npx",
"args": [
"-y",
"mcp-security-audit"
]
}
}
}Add the config above to .claude/settings.json under the mcpServers key.
By Darshankumar Joshi | github.com/darshjme | darshjme@gmail.com Arsenal: https://github.com/darshjme/arsenal
A production-ready security audit kit for Model Context Protocol (MCP) server deployments. Covers tool poisoning, prompt injection, input validation, and hardening.
audit-report.md — findings + severity ratingshardened_server.py — patched MCP server with Arsenal guardstest_security.py — regression test suite (10-20 tests)REMEDIATION.md — step-by-step fix guidepip install -r requirements.txt
python3 audit.py --target http://your-mcp-server:8000Loading reviews...