Skip to main content
Glama
qianniuspace

MCP Security Audit Server

by qianniuspace
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to MCP Security Audit Server

No user-submitted related servers found.

    Related Servers

    • locklens

      BARMPlus
      A
      license
      B
      quality
      D
      maintenance
      Audits package lockfiles for vulnerabilities, supporting npm, yarn, and pnpm. Runs via CLI or as an MCP server over stdio.
      1
      1 npm
      83
      MIT

    • Dependency Checker MCP Server

      djodjonx
      A
      license
      B
      quality
      C
      maintenance
      Enables security scanning for npm dependencies by checking manifest and lockfiles against the OSV.dev and Socket.dev vulnerability databases. It provides tools to detect vulnerabilities in specific packages and retrieve detailed technical reports for identified security issues.
      3
      15 npm
      MIT

    • safe-audit-fix

      pasindudilshan1
      A
      license
      Not graded
      quality
      B
      maintenance
      MCP server that safely fixes npm audit vulnerabilities by planning, applying fixes one at a time, running tests after each, and auto-reverting failures to prevent breaking changes.
      13 npm
      MIT

    • audit-mcp-cli

      double527
      A
      license
      A
      quality
      D
      maintenance
      Lightweight Node.js dependency vulnerability audit tool with CLI and MCP Server modes. Supports npm/pnpm, full dependency chain tracing, remote GitHub repo auditing, and generates Markdown/HTML reports.
      1
      18 npm
      1
      MIT

    • npm-registry-mcp

      howmanysmall
      A
      license
      Not graded
      quality
      C
      maintenance
      An MCP server for searching, inspecting, and evaluating NPM packages through health scoring and license risk assessments. It provides comprehensive package analysis including maintenance status, popularity trends, and security vulnerability reports to help users make informed dependency decisions.
      3
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    C2.9/5.0

    Scored across 1 tool

    Disambiguation5/5

    With only one tool, there is no possibility of confusion between tools. The tool's purpose is clearly stated in its name and description, making it unambiguous.

    Naming Consistency5/5

    A single tool name follows a clear verb_noun pattern (audit_nodejs_dependencies) which is consistent with typical MCP naming conventions. There are no other names to compare, but the pattern is clear.

    Tool Count1/5

    Having only one tool is extremely thin for a security audit server. Auditing dependencies likely requires supporting operations like resolving dependency trees, checking for updates, or generating reports, which are missing.

    Completeness1/5

    The server's purpose appears to be auditing Node.js dependencies, but it only offers a single operation that audits dependencies without coverage for other lifecycle steps like viewing audit results, fixing vulnerabilities, or scanning different scopes.

    Maintenance

    ActivityInactive
    ResponsivenessUnresponsive

    Resources