{
 "schema_version": 1,
 "generated": "2026-10-20",
 "repo": "graygnatconsole/mcp-audit-tool",
 "name": "mcp-audit-tool",
 "owner": "graygnatconsole",
 "slug": "graygnatconsole-mcp-audit-tool",
 "github": "https://github.com/graygnatconsole/mcp-audit-tool",
 "what": "A pure-Python command-line security scanner that audits MCP client configuration files for secrets, unpinned packages, risky launch commands, and tool poisoning indicators.",
 "why": "",
 "language": "Python",
 "requirements": [
  "Python 3.9 or newer",
  "pipx or pip available in the terminal",
  "An MCP client config file (for example claude_desktop_config.json or .cursor/mcp.json), or access to the machine where those files live"
 ],
 "audience_note": "Written for developers and security reviewers who run MCP servers in AI assistants like Claude Desktop or Cursor and want to check their configs before trusting them.",
 "risk": "sensitive",
 "section": "earlier",
 "weekly_rank": null,
 "category": "Security and science",
 "url": "https://dedupedai.com/use-cases/graygnatconsole-mcp-audit-tool/",
 "use_case_count": 3,
 "use_cases": [
  {
   "id": "graygnatconsole-mcp-audit-tool--audit-local-mcp-configs-for-secrets",
   "title": "Find leaked keys and risky MCP servers on your machine",
   "best": true,
   "url": "https://dedupedai.com/use-cases/graygnatconsole-mcp-audit-tool/audit-local-mcp-configs-for-secrets/",
   "json": "https://dedupedai.com/use-cases/u/graygnatconsole-mcp-audit-tool/audit-local-mcp-configs-for-secrets.json"
  },
  {
   "id": "graygnatconsole-mcp-audit-tool--gate-pull-requests-on-mcp-config-security",
   "title": "Block risky MCP config changes in pull requests",
   "best": false,
   "url": "https://dedupedai.com/use-cases/graygnatconsole-mcp-audit-tool/gate-pull-requests-on-mcp-config-security/",
   "json": "https://dedupedai.com/use-cases/u/graygnatconsole-mcp-audit-tool/gate-pull-requests-on-mcp-config-security.json"
  },
  {
   "id": "graygnatconsole-mcp-audit-tool--export-mcp-audit-json-for-team-review",
   "title": "Export a JSON audit report for team review",
   "best": false,
   "url": "https://dedupedai.com/use-cases/graygnatconsole-mcp-audit-tool/export-mcp-audit-json-for-team-review/",
   "json": "https://dedupedai.com/use-cases/u/graygnatconsole-mcp-audit-tool/export-mcp-audit-json-for-team-review.json"
  }
 ],
 "disclaimer": "Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk."
}