MCP Security Audit

MCPOpen SourceMIT49.9

by qianniuspace • Security & Privacy

Audits npm package dependencies for known security vulnerabilities and returns structured, actionable reports with fix recommendations.

Example Use Cases

1
Scan a project's package.json or lockfile for known vulnerabilities and receive recommended fixes.
2
Structured vulnerability data (severity, CVSS, CVE, fixAvailable, fixedVersion) for automated reporting or prioritization.
3
An MCP-compatible service to perform real-time dependency security audits across npm/pnpm/yarn projects.

Description

A Model Context Protocol (MCP) server that integrates with the remote npm registry to perform real-time vulnerability scanning of project dependencies. It produces detailed reports including severity levels, CVSS scores, CVE references, and recommended fixes, and supports npm/pnpm/yarn. The tool is designed to be integrated into agents or developer workflows to automate detection and remediation of dependency vulnerabilities.

Capabilities(1 total)

Tools (1)

audit_nodejs_dependencies

Audit specific dependencies for vulnerabilities

dependencies:object*

Quick Actions

View on GitHub

Security

Scanned 3 month(s) ago

Risk Level

MINIMAL

Read-only data retrieval, no side effects

Trust Score

C57/100

6/17 checks passed

Scores are informational only and provided “as is” without warranty. AgentHotspot assumes no liability for actions taken based on these ratings.

Quick Stats

Service TypeMCP

Pricing ModelFree

Capabilities1 Tools / 0 Prompts / 0 Resources

Ownerqianniuspace

CategorySecurity & Privacy

DependenciesStandalone

Set Your Username