npm audit for MCP servers. Point it at an MCP server and get a security grade (A–F) covering missing auth, SSRF surface…
npm audit for MCP servers. Point it at an MCP server and get a security grade (A–F) covering missing auth, SSRF surface, high-privilege tools, prompt-injection-prone tool descriptions, and leaked secrets.
andreolf
mcp
free
