Skip to content

v0.1.0

Choose a tag to compare

View all tags
@catidegla catidegla released this 08 Sep 14:28
· 13 commits to main since this release
v0.1.0
1dfffbf

First release. Published as @catidegla/mcpaudit.

A tool description is not documentation. It reaches the model as instructions,
written by whoever published the server, and in most clients nobody reads it
after the first install. This scans MCP servers before you approve them.

  • Hidden instructions: Unicode tag characters, bidirectional overrides, zero
    width joiners, and other concealment in text the model will read
  • Tool poisoning and cross server shadowing
  • Credentials and unsafe configuration in server manifests
  • Findings mapped to the OWASP MCP Top 10, with a confidence score
  • Pretty output for a terminal, SARIF for code scanning

Local, no API key, zero dependencies. The flagship test is a false positive
corpus: benign servers that look alarming, which the scanner has to leave alone.

Assets 2
Loading