Pricing

$0.25 / mcp server audited

Try for free

Go to Apify Store

MCP Security & Vulnerability Auditor (2026)

Try for free

Zero-execution security scanner for Model Context Protocol (MCP) servers. Audits for Command Injection (CWE-78), Path Traversal (CWE-22), Secret Leaks (CWE-798), and Unauthenticated Transports. Generates verified Trust Scores and remediation reports.

Pricing

$0.25 / mcp server audited

Rating

0.0

(0)

Developer

Neon Innovation Lab

Actor stats

Bookmarked

Total users

Monthly active users

38 minutes ago

Last modified

🛡️ Why Use This Actor?

With thousands of MCP servers published across registries, AI agents have direct access to filesystems, command lines, and internal databases.

Following 30+ CVE disclosures against MCP tools in 2025 and 2026, standard security practices now require continuous verification of third-party tools.

Unlike standard runtime scanners that attempt to run arbitrary stdio commands defined in target configs (creating severe RCE hazards for the scanning host), this Actor uses pure static AST analysis. It inspects the source code syntax tree and configurations without executing untrusted code.

🔍 Vulnerability Checks Covered

Rule ID	Severity	CWE	Description
MCP-SEC-001	CRITICAL	CWE-78	Command Injection: Detects `subprocess.run(shell=True)`, `os.system()`, and dynamic string interpolation in shell calls.
MCP-SEC-002	HIGH	CWE-22	Path Traversal / Arbitrary File Access: Detects file read/write tools lacking strict root boundary checks (`Path.is_relative_to()` or `commonpath`), as well as ZipSlip/TarSlip archive extractions.
MCP-SEC-003	CRITICAL	CWE-798	Credential & Secret Exposure: Scans for leaked OpenAI, Anthropic, GitHub, AWS, and Slack keys, and flags tools returning raw `os.environ`.
MCP-SEC-004	HIGH	CWE-306	Unauthenticated Remote Transport: Flags SSE / HTTP endpoints bound to `0.0.0.0` without authentication tokens.
MCP-SEC-005	HIGH	CWE-1384	Tool Poisoning & Prompt Injection: Flags adversarial instructions and zero-width homoglyph obfuscation in tool docstrings and descriptions.

📥 Input Configuration

{
  "repositoryUrls": [
    "https://github.com/modelcontextprotocol/servers"
  ],
  "subDirectories": [
    "src/everything",
    "src/fetch"
  ],
  "minimumPassScore": 80
}

repositoryUrls (Required): List of public Git URLs for the MCP server repositories to audit.
subDirectories (Optional): List of subdirectories to audit individually (ideal for monorepos).
minimumPassScore (Optional, Default: 80): The minimum Trust Score (0–100) required to consider the repository passed.

📤 Output

1. Structured Dataset Records

Each audited server produces a structured JSON record containing:

trust_score: Score from 0 to 100.
grade: Security letter grade (A+, A, B, C, F).
passed: Boolean indicating if the score meets minimumPassScore.
findings: Array of detailed findings with file paths, line numbers, CWE IDs, code snippets, and specific remediation advice.

2. Downloadable Markdown Report

The full human-readable audit report is saved to the run's default Key-Value store under OUTPUT_REPORT.md.

MCP Server Risk Auditor

trovevault/mcp-server-risk-auditor

Audits MCP server manifests for tool, permission, credential, prompt-injection, exfiltration, and execution risks. Export data, run via API, schedule and monitor runs, or integrate with other tools.

Trove Vault

Website Tech Stack Change Detector

zinin/tech-stack-change-detector

Compare public submitted-page HTML and response-header signatures with a technology baseline you supply. Returns candidate additions, technologies not observed now, evidence provenance, confidence, gaps, stable IDs, and a conservative verification action for up to 100 websites.

Tim Zinin

theHarvester Domain OSINT Collector

automation-lab/theharvester-domain-osint-collector

Collect source-attributed public certificate hostnames, resolved IPs, DNS aliases, and related URL candidates for recurring domain reconnaissance.

Stas Persiianenko

DMARC Report Analyzer — Email Security & SPF/DKIM

perryay/dmarc-report-analyzer

Parse and analyze DMARC forensic and aggregate reports. Get SPF/DKIM alignment, identify spoofing attempts, and monitor email authentication health.

Perry AY

Solana Anchor Audit Scanner — First-Pass Review & Audit Verify

halobartku/sol-audit

Static security audit for Solana/Anchor Rust repos. Repo URL in, structured findings out: severity, CWE, file:line, evidence, fix. 16 Solana rule families, deterministic, ~6s/repo. Triage or audit-report verification. Honest: 0/11 recall on labelled corpus — cross-check, not human-audit replacement.

EPSS Exploit Prediction Scraper

parseforge/epss-exploit-prediction-scraper

Scrapes EPSS exploit prediction scores from the FIRST public data service. Returns CVE ID, EPSS score, percentile, and date for single CVEs, lists, or the full daily corpus with optional history and flattened output.

ParseForge

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.

Sanskar Jaiswal

CISA ICS Advisory Change Monitor - New & Updated Only

rtworule/cisa-ics-advisory-delta-monitor

Monitor official CISA ICS advisories and emit only new, updated, or removed CSAF records for OT security, vulnerability management, and compliance workflows.

Kunteper Koyu

🛡️ CISA KEV Deadline & EPSS Vulnerability Radar

snuggly_beanie_970/cisa-kev-remediation-radar

🛡️ Prioritize actively exploited vulnerabilities using CISA KEV deadlines plus FIRST EPSS probability. 🚨 Flag overdue fixes, ransomware use and high-risk CVEs. ✅ Schedule-ready, deduplicated security alerts with official sources.

Ilia

GitHub Repo Search — Stars, Language & Topics

ryanclinton/github-repo-search

Search and scrape GitHub repositories by keyword, language, stars, forks, or topic. Extract structured repo metadata including owner, license, topics, and activity timestamps. Sort by stars, forks, or recently updated. Export to JSON, CSV, or API. No token required.

Ryan Clinton

111

2.7

(2)

Google News Scraper & Alerts - Brand Monitoring API

groupoject/google-news-scraper

Scrape and monitor Google News by keyword for brand alerts, competitor tracking, PR monitoring, market research, headlines, publisher domains, dates, snippets, and article links. No API key required.