MCP Security Audit — AI/ML Vulnerability ScannerMcp Security Audit

by LuciferForge

168 downloads

Not rated

GitHub

Developer Tools

About

Scan any GitHub repository for 21 AI/ML vulnerability patterns across Python, Java, Go, C++, and Rust. Detects eval injection, pickle deserialization, SSRF, command injection, SQL injection, unsafe YAML, hardcoded secrets, and more. Severity-weighted risk scoring with line-level

Details

Author: LuciferForge
Downloads: 168
Categories: Developer Tools

- Scans GitHub repositories and code snippets
- Covers 21 detection patterns across 5 languages
- Severity levels from CRITICAL through LOW
- Detects eval/exec injection, deserialization attacks, command injection, SSRF, SQL injection, buffer overflow, format strings, unsafe blocks, and hardcoded secrets
- Provides a list_patterns tool to enumerate all patterns

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name MCP Security Audit — AI/ML Vulnerability ScannerMcp Security Audit

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

From the repository

Install via pip: pip install mcp-security-audit. Then use the server’s tools (audit_repo, audit_code, list_patterns) with any MCP‑compatible client. No additional configuration keys are required beyond standard MCP setup.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "mcp security audit \u2014 ai/ml vulnerability scannermcp security audit": {
            "security-audit": {
                "command": "python",
                "args": [
                    "-m",
                    "mcp_security_audit"
                ],
                "env": []
            }
        }
    }
}

McpServers

{
    "security-audit": {
        "command": "python",
        "args": [
            "-m",
            "mcp_security_audit"
        ],
        "env": []
    }
}

Install

pip install mcp-security-audit

Tools

- audit_repo — Scan a GitHub repository for vulnerabilities - audit_code — Scan a code snippet directly - list_patterns — List all 21 detection patterns

21 Patterns Across 5 Languages

Python (9), Java (3), Go (3), C++ (3), Rust (3) Covers CRITICAL through LOW severity: eval/exec injection, deserialization attacks, command injection, SSRF, SQL injection, buffer overflow, format strings, unsafe blocks, and hardcoded secrets.

Links

- PyPI: https://pypi.org/project/mcp-security-audit/ - GitHub: https://github.com/LuciferForge/mcp-security-audit

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

McpServers

Install

Tools

21 Patterns Across 5 Languages

Links

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright