mcp-audit
See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.
File Explorer
Download Latest Version (.zip)- mcp-audit.yml
- report.ts
- email.ts
- pdf.tsx
- .gitignore
- package-lock.json
- package.json
- README.md
- tsconfig.json
- vercel.json
- collector.ps1
- collector.sh
- 01-functional-capabilities.md
- 02-architecture-technical-design.md
- 03-implementation-plan.md
- CLAUDE_CODE_PROMPTS.md
- mcp-audit-lead-capture-prompt-removelocalpdf.md
- mcp-audit-lead-capture-prompt.md
- mcp-audit-model-detection-ai-bom-prompt.md
- MCP-AUDIT-PRODUCT-STRATEGY.md
- mcp-audit-ui-color-redesign-prompt.md
- MCP-SECURITY-TESTING-STRATEGY.md
- privacy-qa.md
- RISK_SCORING.md
- SOURCE_SCAN.md
- USER_GUIDE.md
- verified-mcp-registry-qa.md
- __init__.py
- analyze.py
- policy.py
- registry.py
- scan.py
- source_scan.py
- trust.py
- __init__.py
- allowlist_bypass_binaries.py
- api_patterns.py
- known_mcps.json
- model_patterns.py
- owasp_llm.py
- risk_definitions.py
- secret_patterns.py
- __init__.py
- cyclonedx.py
- formatter.py
- pdf_report.py
- sarif.py
- __init__.py
- claude.py
- cursor.py
- docker.py
- project.py
- source.py
- vscode.py
- windsurf.py
- zed.py
- __init__.py
- cli.py
- models.py
- enterprise.yaml
- permissive.yaml
- strict.yaml
- build-cli-zip.sh
- dev-server.sh
- generate-checksums.sh
- random_script.js
- server.js
- server.js
- server.py
- claude_desktop_config.json
- collected_config.json
- cursor_mcp.json
- package.json
- __init__.py
- conftest.py
- test_models.py
- test_outputs.py
- test_owasp_llm.py
- test_policy.py
- test_registry.py
- test_scanners.py
- test_source_scanner.py
- test_trust.py
- .gitignore
- .nojekyll
- action.yml
- app.js
- BUG_TRACKER.md
- CHANGELOG.md
- CHECKSUMS.txt
- CONTRIBUTING.md
- demo-data.json
- deploy.sh
- Dockerfile
- getting-started.html
- google-apps-script.js
- index.html
- LICENSE
- mcp-audit-cli.zip
- PR-FAQ.md
- pyproject.toml
- README.md
- RELEASE_NOTES.md
- RELEASE_v1.0.0.md
- screenshot.png
- Screenshot2.png
- SECURITY-ADVISORY-2025-001.md
- SECURITY.md
- styles.css
# Installation Guide
git clone https://github.com/apisec-inc/mcp-audit
Downloads the entire project code from GitHub to your computer.
cd mcp-audit
Moves into the project folder you just downloaded.
2. Docker
Easy Recommended- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
docker build -t mcp-audit .
Builds a runnable image based on the Dockerfile.
docker run -v $(pwd):/scan mcp-audit scan
Runs the built image as an actual container.
docker run -v $(pwd):/scan mcp-audit scan --format json -o /scan/report.json
Runs the built image as an actual container.
Pulled directly from this repo's README.
3. Node.js
Easycd backend
This project's files live in a subfolder, so move into it first.
npm install
Downloads and installs the libraries listed in package.json.
npm start
Starts the development/run server.
4. Python
Easypip install -e .
Installs the Python libraries listed in requirements.txt (or similar).
run: pip install mcp-audit
Installs the Python libraries listed in requirements.txt (or similar).
- run: pip install mcp-audit
Installs the Python libraries listed in requirements.txt (or similar).
Pulled directly from this repo's README.