MCP Security & Vulnerability Auditor (2026)
Pricing
$0.25 / mcp server audited
Zero-execution security scanner for Model Context Protocol (MCP) servers. Audits for Command Injection (CWE-78), Path Traversal (CWE-22), Secret Leaks (CWE-798), and Unauthenticated Transports. Generates verified Trust Scores and remediation reports.
You can access the MCP Security & Vulnerability Auditor (2026) programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, youโll need an Apify account and your API token, found in API & Integrations in Apify Console.
# Set API token$API_TOKEN=<YOUR_API_TOKEN>
# Prepare Actor input$cat > input.json << 'EOF'<{< "repositoryUrls": [< "https://github.com/modelcontextprotocol/servers"< ]<}<EOF
# Run the Actor using an HTTP API# See the full API reference at https://docs.apify.com/api/v2$curl "https://api.apify.com/v2/actors/neon_innovation_lab~mcp-security-auditor/runs?token=$API_TOKEN" \< -X POST \< -d @input.json \< -H 'Content-Type: application/json'Below, you can find a list of relevant HTTP API endpoints for calling the MCP Security & Vulnerability Auditor (2026) Actor. For this, youโll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.
https://api.apify.com/v2/actors/neon_innovation_lab~mcp-security-auditor/runs?token=<YOUR_API_TOKEN>Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.
https://api.apify.com/v2/actors/neon_innovation_lab~mcp-security-auditor/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.
https://api.apify.com/v2/actors/neon_innovation_lab~mcp-security-auditor?token=<YOUR_API_TOKEN>For more information, please refer to our Get Actor API documentation.
Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the MCP Security & Vulnerability Auditor (2026) API programmatically via the Apify API.
You can choose from:
You can start MCP Security & Vulnerability Auditor (2026) with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actorโs input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The MCP Security & Vulnerability Auditor (2026) is identified within the API by its ID, which is the creatorโs username and the name of the Actor.
When the MCP Security & Vulnerability Auditor (2026) run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.