io.github.saagpatel/mcp-audit
mcp-audit
Scan, enumerate, and risk-score every MCP server configured on your machine.
alive probed 2026-10-19
13tools
≈ 1.1ktokens, estimate
≈ 0.6 %of Claude's 200k window
0.8×the median server
2.4 sto initialize
4 msto list tools
- Run it
- uvx mcp-audits==2.12.0 (stdio, probed in a container with the network off)
- Host
- pypi.org
- Reports itself as
- mcp-audit
- Capabilities
- prompts, resources, tools
- Instructions
- 106 characters
- Of a 1M window
- ≈ 0.1 % of a 1M context window, estimate
- Claude count
- The count_tokens endpoint refused the tool schemas: invalid x-api-key. The estimate stands in.
- Repository
- https://github.com/saagpatel/MCPAudit
- Registry
- active, updated 2026-10-13 · registry entry
- Reachable
- 1 of the last 1 probe
Most expensive tools
Estimates with the o200k_base tokenizer.
| Tool | o200k estimate | Share of this server |
|---|---|---|
| scan_mcp_servers | 149 | 14 % |
| get_artifact_verify_findings | 119 | 11 % |
| get_package_verify_findings | 115 | 10 % |
| get_provenance_findings | 113 | 10 % |
| get_integrity_findings | 103 | 9 % |
Badge for the README
The result of the latest probe, the tool count and the token cost. The feed has an entry for every probe that changed them.
A mail when this server changes
Stops answering, comes back, tool set or cost changes. One confirmation mail first, a stop link in every mail.
For the publisher
- The Anthropic count_tokens endpoint refused the tool schemas (invalid x-api-key). A client that validates schemas can refuse them too.