LocalFree

Latchpoint MCP server

robyroro/mcp-latchpoint

Offline, read-only audit of MCP client configs: flags plain HTTP, shell wrappers, unpinned runners, embedded credentials and broad access scopes; outputs redacted text, JSON or SARIF.

0 GitHub stars
Source code

Install Latchpoint in Claude Code

Claude Code
claude mcp add latchpoint -- uvx mcp-latchpoint
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "latchpoint": {
      "command": "uvx",
      "args": [
        "mcp-latchpoint"
      ]
    }
  }
}

Frequently asked questions

What does the Latchpoint MCP server do?

Offline, read-only audit of MCP client configs: flags plain HTTP, shell wrappers, unpinned runners, embedded credentials and broad access scopes; outputs redacted text, JSON or SARIF.

Is the Latchpoint MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Latchpoint run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Latchpoint to Claude Code?

Run: claude mcp add latchpoint -- uvx mcp-latchpoint

More security & identity MCP servers

View all

Rails

0

jaimenbell/rails-mcp

Self-hosted default-deny action registry, append-only spend-intent ledger and human sign-off audit trail for gating irreversible agent actions.

LocalFreePython

Identity AIops

0

AIops-tools/Identity-AIops

Keycloak and Authentik SSO/IAM operations: root-cause analysis for login, permission, client and MFA issues, plus guarded writes with audit logs and rollback.

LocalFreePython

Rqwstr

0

Kjopstad-IT/rqwstr-mcp

HTTP security testing toolkit (send, intruder, race, chain, out-of-band) with low-level HTTP/1.1 and HTTP/2 control: raw framing and connection pinning.

LocalFreeGo

Compliance AIops

0

AIops-tools/Compliance-AIops

Turn other AIops tools' audit trails into tamper-evident, hash-chained evidence bundles mapped to HIPAA, PCI-DSS, SOC 2 and GDPR. Offline and deterministic.

LocalFreePython

SaveSaveSaveSave

691

stefantsezarov/SaveSaveSaveSave

Read-only checks before an agent acts: prompt-injection and phishing scan of untrusted text (local), npm package check for malware, hijacked releases and typosquats, crypto address and token scan, and address-poisoning comparison. Zero dependencies.

LocalAccount neededTypeScript

Checker

0

OksigeniaSL/checker-mcp

Local-first domain security and privacy checker: live SPF, DMARC, DKIM, DNSSEC, TLS, CAA and security header checks, scored with remediation advice.

LocalFreeTypeScript