{"id":25676067,"url":"https://github.com/qianniuspace/mcp-security-audit","last_synced_at":"2026-08-27T15:45:12.637Z","repository":{"id":278600869,"uuid":"936158314","full_name":"qianniuspace/mcp-security-audit","owner":"qianniuspace","description":"A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.","archived":false,"fork":false,"pushed_at":"2025-07-18T09:03:21.000Z","size":1959,"stargazers_count":46,"open_issues_count":0,"forks_count":8,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-10-05T04:39:19.200Z","etag":null,"topics":["audit","model-context-protocol","npm","security"],"latest_commit_sha":null,"homepage":"https://mcpdirs.com/","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/qianniuspace.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-02-20T16:12:01.000Z","updated_at":"2025-10-03T23:37:52.000Z","dependencies_parsed_at":"2025-02-20T17:34:54.448Z","dependency_job_id":"80af50e5-209a-45ae-862b-3cc1820b2da0","html_url":"https://github.com/qianniuspace/mcp-security-audit","commit_stats":null,"previous_names":["qianniuspace/mcp-security-audit"],"tags_count":3,"template":true,"template_full_name":null,"purl":"pkg:github/qianniuspace/mcp-security-audit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/qianniuspace%2Fmcp-security-audit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/qianniuspace%2Fmcp-security-audit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/qianniuspace%2Fmcp-security-audit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/qianniuspace%2Fmcp-security-audit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/qianniuspace","download_url":"https://codeload.github.com/qianniuspace/mcp-security-audit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/qianniuspace%2Fmcp-security-audit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36944061,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["audit","model-context-protocol","npm","security"],"created_at":"2025-02-24T14:01:04.496Z","updated_at":"2026-08-27T15:45:12.631Z","avatar_url":"https://github.com/qianniuspace.png","language":"TypeScript","funding_links":[],"categories":["Security","Cloud Infrastructure","Security \u0026 Attestation MCP Servers","📚 Projects (1974 total)","MCP 服务器精选列表","Legend","🔐 Authentication","サーバー実装","MCP Servers","🔌 MCP Security","🧩 Miscellaneous","Table of Contents","🔒 Security (50 servers)","Server Implementations"],"sub_categories":["SIEM \u0026 SecOps","🔒 Security","MCP Servers","🔒 安全与分析","🔒 \u003ca name=\"security\"\u003e\u003c/a\u003eSecurity","🔒 \u003ca name=\"security\"\u003e\u003c/a\u003eセキュリティ","How to Submit","Scanners and Auditors","Security"],"readme":"\n# Security Audit Tool\n\n[![smithery badge](https://smithery.ai/badge/@qianniuspace/mcp-security-audit)](https://smithery.ai/server/@qianniuspace/mcp-security-audit)\n[![NPM version](https://img.shields.io/npm/v/mcp-security-audit.svg)](https://www.npmjs.com/package/mcp-security-audit)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n\n\u003ca href=\"https://glama.ai/mcp/servers/jjnmdxzmeu\"\u003e\n  \u003cimg width=\"380\" height=\"200\" src=\"https://glama.ai/mcp/servers/jjnmdxzmeu/badge\" /\u003e\n\u003c/a\u003e\n\nA powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.\n\n## Features\n\n- 🔍 Real-time security vulnerability scanning\n- 🚀 Remote npm registry integration\n- 📊 Detailed vulnerability reports with severity levels\n- 🛡️ Support for multiple severity levels (critical, high, moderate, low)\n- 📦 Compatible with npm/pnpm/yarn package managers\n- 🔄 Automatic fix recommendations\n- 📋 CVSS scoring and CVE references\n\n\n\n### Installing via Smithery\n\nTo install Security Audit Tool for Claude Desktop automatically via [Smithery](https://smithery.ai/server/@qianniuspace/mcp-security-audit):\n\n```bash\nnpx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude\n```\n\n### MCP Integration\n\n#### Option 1: Using NPX (Recommended)\n\n\n1. Add MCP configuration to Cline /Cursor:\n```json\n{\n  \"mcpServers\": {\n    \"mcp-security-audit\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"mcp-security-audit\"]\n    }\n  }\n}\n```\n\n#### Option 2: Download Source Code and Configure Manually\n\n1. Clone the repository:\n```bash\ngit clone https://github.com/qianniuspace/mcp-security-audit.git\ncd mcp-security-audit\n```\n\n2. Install dependencies and build:\n```bash\nnpm install\nnpm run build\n```\n\n3. Add MCP configuration to Cline /Cursor :\n```json\n{\n  \"mcpServers\": {\n    \"mcp-security-audit\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"/path/to/mcp-security-audit/build/index.js\"]\n    }\n  }\n}\n```\n\n\n## Configuration Screenshots\n\n### Cursor Configuration\n![Cursor Configuration](images/cursor-config.png)\n\n### Cline Configuration\n![Cline Configuration](images/cline-config.png)\n\n\n\n\n\n## API Response Format\n\nThe tool provides detailed vulnerability information including severity levels, fix recommendations, CVSS scores, and CVE references.\n\n### Response Examples\n\n#### 1. When Vulnerabilities Found (Severity-response.json)\n```json\n{\n  \"content\": [{\n    \"vulnerability\": {\n      \"packageName\": \"lodash\",\n      \"version\": \"4.17.15\",\n      \"severity\": \"high\",\n      \"description\": \"Prototype Pollution in lodash\",\n      \"cve\": \"CVE-2020-8203\",\n      \"githubAdvisoryId\": \"GHSA-p6mc-m468-83gw\",\n      \"recommendation\": \"Upgrade to version 4.17.19 or later\",\n      \"fixAvailable\": true,\n      \"fixedVersion\": \"4.17.19\",\n      \"cvss\": {\n        \"score\": 7.4,\n        \"vector\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N\"\n      },\n      \"cwe\": [\"CWE-1321\"],\n      \"url\": \"https://github.com/advisories/GHSA-p6mc-m468-83gw\"\n    },\n    \"metadata\": {\n      \"timestamp\": \"2024-04-23T10:00:00.000Z\",\n      \"packageManager\": \"npm\"\n    }\n  }]\n}\n```\n\n#### 2. When No Vulnerabilities Found (no-Severity-response.json)\n```json\n{\n  \"content\": [{\n    \"vulnerability\": null,\n    \"metadata\": {\n      \"timestamp\": \"2024-04-23T10:00:00.000Z\",\n      \"packageManager\": \"npm\",\n      \"message\": \"No known vulnerabilities found\"\n    }\n  }]\n}\n```\n\n\n## Development\n\nFor development reference, check the example response files in the `public` directory:\n- [Severity-response.json](public/Severity-response.json) : Example response when vulnerabilities are found (transformed from npm audit API response) \n- [no-Severity-response.json](public/no-Severity-response.json) : Example response when no vulnerabilities are found (transformed from npm audit API response)\n\nNote: The example responses shown above are transformed from the raw npm audit API responses to provide a more structured format. The original npm audit API responses contain additional metadata and may have a different structure.\n\n## Contributing\n\nContributions are welcome! Please read our [Contributing Guide](CODE_OF_CONDUCT.md) for details on our code of conduct and the process for submitting pull requests.\n\n## License\n\nThis project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.\n\n## Author\n\nESX (qianniuspace@gmail.com)\n\n## Links\n\n- [GitHub Repository](https://github.com/qianniuspace/mcp-security-audit)\n- [Issue Tracker](https://github.com/qianniuspace/mcp-security-audit/issues)\n- [Changelog](CHANGELOG.md)\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fqianniuspace%2Fmcp-security-audit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fqianniuspace%2Fmcp-security-audit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fqianniuspace%2Fmcp-security-audit/lists"}