SERVER

mcp-security-audit

Rank #14,389

io.github.eltociear/skill-audit-mcp

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

3 versions

5 GitHub stars

by eltociear (7 servers)View repository ↗

First listed

Apr 30, 2026

Last publish date

Sep 30, 2026

PURPOSE

What you can do with mcp-security-audit

mcp-security-audit is a Model Context Protocol (MCP) server published by eltociear. It ranks #14,389 of 144,396 active servers on MCP Toplist, and its repository has 5 GitHub stars. mcp-security-audit is listed across 3 registries — Official MCP, Glama and PulseMCP, with 3 tracked versions. It was first listed on Apr 30, 2026 and most recently updated on Sep 30, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.

CAPABILITIES AND LIMITATIONS

What mcp-security-audit can and cannot do

MCP Toplist connected to the public endpoint on Oct 13, 2026 and it listed 11 tools. Tool names are not stored, so what they do is not catalogued here.

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.

REQUIREMENTS

What you need before using mcp-security-audit

VerifiedNo credentialsNo credentials declared

The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.

Verified by MCP Toplist on Oct 13, 2026: the public endpoint completed the MCP handshake and listed 11 tools without credentials.

Declared by Glama, last synced Oct 16, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

Hosted endpoint declared as public.

INSTALLATION AND FIRST TASK

Connect mcp-security-audit and confirm it works

Remote · HTTP

claude mcp add --transport http skill-audit-mcp https://eltociear-skill-audit.hf.space/mcp

Docker image

claude mcp add skill-audit-mcp -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0

Remote · HTTP

[mcp_servers.skill-audit-mcp]
url = "https://eltociear-skill-audit.hf.space/mcp"

Add to ~/.codex/config.toml.

Docker image

[mcp_servers.skill-audit-mcp]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"]

Add to ~/.codex/config.toml.

Remote · HTTP

https://eltociear-skill-audit.hf.space/mcp

Settings → Connectors → “Add custom connector”, then paste this URL.

Docker image

{
  "mcpServers": {
    "skill-audit-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config).

Remote · HTTP

{
  "mcpServers": {
    "skill-audit-mcp": {
      "url": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project).

Docker image

{
  "mcpServers": {
    "skill-audit-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project).

Remote · HTTP

{
  "servers": {
    "skill-audit-mcp": {
      "type": "http",
      "url": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Save as .vscode/mcp.json in your workspace.

Docker image

{
  "servers": {
    "skill-audit-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Save as .vscode/mcp.json in your workspace.

Remote · HTTP

{
  "mcpServers": {
    "skill-audit-mcp": {
      "serverUrl": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Docker image

{
  "mcpServers": {
    "skill-audit-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Remote · HTTP

{
  "mcpServers": {
    "skill-audit-mcp": {
      "url": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Docker image

{
  "mcpServers": {
    "skill-audit-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

ALTERNATIVES

When to choose another server

Other servers by eltociear

View all eltociear servers →

No task-specific alternatives are catalogued for mcp-security-audityet; the list above is its publisher's other servers.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Apr 30, 2026
Latest version published: Sep 30, 2026
Version history: 3 versions tracked (below)
Requirements evidence: Verified by MCP Toplist on Oct 13, 2026: the public endpoint completed the MCP handshake and listed 11 tools without credentials.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Oct 16, 2026

Registry sightings

Glama ↗listed since Apr 30, 2026 · delisted, last seen Aug 11, 2026
Glama ↗listed since May 2, 2026 · still listed
PulseMCP ↗listed since May 22, 2026 · still listed
Official MCP ↗listed since Jul 24, 2026 · still listed

Do you maintain mcp-security-audit? to correct or enrich this profile.

VERSIONS

Available versions (3)

Version	Published
1.2.0	Sep 30, 2026
1.1.0	Jul 29, 2026
1.0.2	Jun 7, 2026

STANDING

#14,389of 144,396 active serversTop 10%

Ranks ahead of 130,007 of 144,396 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.eltociear%2Fskill-audit-mcp.svg)](https://mcptoplist.com/server/io.github.eltociear%2Fskill-audit-mcp)

HTML

<a href="https://mcptoplist.com/server/io.github.eltociear%2Fskill-audit-mcp"><img src="https://mcptoplist.com/badge/io.github.eltociear%2Fskill-audit-mcp.svg" alt="MCP Toplist: Top 10% of 144,396" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Who maintains mcp-security-audit?: mcp-security-audit is maintained by eltociear, which publishes 7 MCP servers (10 total versions) tracked on MCP Toplist.
Is mcp-security-audit listed on the Official MCP Registry?: Yes — mcp-security-audit is listed on the Official MCP Registry, alongside Glama and PulseMCP.
How many versions does mcp-security-audit have?: MCP Toplist tracks 3 versions of mcp-security-audit, most recently published on Sep 30, 2026.
Where can I find the source code for mcp-security-audit?: The source code for mcp-security-audit is hosted at github.com/eltociear/skill-audit-mcp.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers