What can you do with this server?

This server provides automated security red-teaming and auditing for MCP servers, covering OWASP LLM Top 10 (2025) and MCP-specific risks, producing 0–100 scored and HMAC-signed security reports. * audit_server_json — Full OWASP LLM Top 10 + MCP-specific security audit on an entire server.json configuration. * audit_tool_description — Deep-scan a single tool description for prompt injection signals, destructive operation indicators, or spoofing attempts. * check_destructive_surface — Fast check returning only destructive-surface findings (LLM08) — suitable as a CI/CD gate. * check_supply_chain — Audit only supply-chain findings (LLM05), including dependency pinning and provenance checks. * list_owasp_findings — Retrieve the canonical mapping of OWASP LLM Top 10 (2025) to MCP-Hardening rules as a reference guide. * generate_hardened_template — Generate a minimal, pre-configured server.json starter template that achieves a Grade A security score. * sign_security_report — HMAC-seal an audit result to produce a cryptographically signed, verifiable security badge/report. The server also includes built-in EU AI Act compliance coverage (Risk Management, Transparency, Bias Detection, FRIA Support, AI Content Watermarking) and integrates with the MEOK AI Labs ecosystem.

How do I use MEOK MCP Hardening MCP?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@MEOK MCP Hardening MCP run a security audit on my MCP server manifest" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Meok MCP Hardening MCP

mcp-name: io.github.CSOAI-ORG/meok-mcp-hardening-mcp

MEOK MCP Hardening MCP

MEOK MCP Hardening MCP — automated security red-team for any MCP server

MEOK MCP Hardening MCP — automated security red-team for any MCP server. OWASP LLM Top 10 (2025) + 5 MCP-specific risks → 0-100 score + HMAC-signed report. By MEOK AI Labs.

🚀 Quick Start

# Install via pip
pip install meok_mcp_hardening_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install meok-mcp-hardening-mcp --client claude

Related MCP server: tooltrust-mcp

✨ Features

MCP protocol compliant
Easy installation
Well-documented API
Production-ready
Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

✅ Article 9 — Risk Management System
✅ Article 13 — Transparency & Instructions for Use
✅ Article 15 — Bias Detection & Testing
✅ Article 26 — FRIA Support (where applicable)
✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

Pro: $99/mo — Full MCP suite + EU AI Act tracking
Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

Domain	Purpose
councilof.ai	EU AI Act compliance marketplace
safetyof.ai	AI safety & monitoring
meok.ai	Sovereign AI platform
cobolbridge.ai	Legacy modernization

📜 License

MIT © CSOAI-ORG

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Legal

Built by MEOK AI Labs — trading name of CSOAI LTD, UK Companies House 16939677. Founder: Nicholas Templeman (nicholas@meok.ai). License: MIT.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

{
  "mcpServers": {
    "meok-mcp-hardening-mcp": {
      "command": "uvx",
      "args": ["meok-mcp-hardening-mcp"]
    }
  }
}

Or: pip install meok-mcp-hardening-mcp then run the meok-mcp-hardening-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

"Use audit_server_json to …"
"Use audit_tool_description to …"
"Use check_destructive_surface to …"

Available Tools

7 tools

audit_server_jsonCInspect

Full OWASP LLM Top 10 + MCP-specific security audit of an MCP server.json.

Inputs: server_json (required).

audit_tool_descriptionCInspect

Deep-scan a single tool description for injection / destructive / spoof signals.

Inputs: tool (required).

check_destructive_surfaceCInspect

Return only the destructive-surface findings (LLM08) — fast gate for CI.

Inputs: server_json (required).

check_supply_chainCInspect

Return only supply-chain findings (LLM05) — pin + provenance audit.

Inputs: server_json (required).

generate_hardened_templateAInspect

Return a minimal-passing server.json starter that scores A.

Inputs: no named parameters.

list_owasp_findingsAInspect

Return the canonical OWASP LLM Top 10 (2025) → MCP-Hardening rule map.

Inputs: no named parameters.

sign_security_reportCInspect

HMAC-seal an audit result so it can be published as a signed badge.

Inputs: audit_result (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

B3.2/5.0

Scored 2026-05-28 06:50 across 7 tools

Disambiguation5/5

Each tool targets a distinct security audit task: full server audit, per-description scan, specific vulnerability checks, template generation, listing rules, and signing reports. No overlap in purpose.

Naming Consistency3/5

Tool names use underscore and follow verb_noun pattern, but verbs vary: 'audit', 'check', 'generate', 'list', 'sign'. While readable, the mix of verbs reduces consistency compared to a uniform pattern.

Tool Count5/5

7 tools is well-scoped for a security hardening server. Each tool addresses a distinct need without being too few or excessive.

Completeness4/5

Covers core audit workflows: full server audit, per-tool scan, specific checks (destructive, supply chain), template generation, reference map, and report signing. Minor gap: no direct apply/patch tool, but overall comprehensive.

Maintenance

ActivityInactive

ResponsivenessNo recent community issues

Resources

Related MCP Connectors

MCP Fortress
io.github.mcp-fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Security Testing & QA Tools Penetration Testing
2
https://server.smithery.ai/@mcp-fortress/mcp-fortress-server/mcp
mcpcheckB
io.github.joeyough
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Penetration Testing Security
21
https://mcpcheck.netlify.app/mcp
MCPVetter
com.mcpvetter
Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws.
Penetration Testing Code Analysis Testing & QA Tools
1
https://mcpvetter.com/mcp
Frogeye Security ScannerA
io.github.frogeye-ai
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Security Penetration Testing
2
https://mcp.frogeye.ai/mcp

Related MCP Servers

project-shield
Security Testing & QA Tools Code Analysis
Whitening-Sinabro
A
license
Not graded
quality
D
maintenance
Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.
Updated 3 months ago (2026-08-12 18:57 UTC)
MIT
tooltrust-mcp
AI & Machine Learning Security Testing & QA Tools
AgentSafe-AI
A
license
Not graded
quality
B
maintenance
Scans MCP servers for prompt injection, supply chain attacks, excessive permissions, and code execution risks. Includes an offline blacklist that catches known-compromised packages like LiteLLM 1.82.7/1.82.8 and Trivy with zero latency.
Updated 3 days ago (2026-11-09 20:40 UTC)
19
MIT
meok-mcp-injection-scan-mcp
Penetration Testing Security
Council-of-AI-CSOAI-org
A
license
A
quality
D
maintenance
Scans MCP servers for prompt-injection, tool-poisoning, and SSRF vulnerabilities using 30+ canonical rules across 5 severity tiers, with optional signed safety reports for procurement.
Updated a month ago (2026-10-08 01:05 UTC)
5
MIT
AIShield
Security Code Analysis Penetration Testing
lm203688
A
license
Not graded
quality
B
maintenance
Scans MCP servers and AI tools for security risks, providing 4-dimensional scoring and badges, with optional guardrail MCP for auto-protection.
Updated 10 days ago (2026-11-02 18:18 UTC)
2
MIT

Meok MCP Hardening MCP

MEOK MCP Hardening MCP

🚀 Quick Start

✨ Features

📖 Documentation

🛡️ Compliance

🏢 Enterprise

🤝 Part of the MEOK Ecosystem

📜 License

Legal

Configuration

Examples

Available Tools

Tool Schema Changelog

TDQS

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

project-shield

tooltrust-mcp

meok-mcp-injection-scan-mcp

AIShield