Install Security Audit in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add security-audit -- <command to start the server>Frequently asked questions
What does the Security Audit MCP server do?
Audit npm package dependencies for security vulnerabilities with real-time checks against the npm registry.
Is the Security Audit MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Security Audit run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Security Audit to Claude Code?
Follow the install steps in the project's README at https://github.com/qianniuspace/mcp-security-audit, then register it with "claude mcp add".
More security & identity MCP servers
View allSecrets-LE
nolindnaidoo/secrets-le
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
Studio
snyk/studio-mcp
Embeds Snyk's security engines into agentic workflows to secure AI-generated code in real time and work through vulnerability backlogs faster.
Appstore Connect
ryaker/appstore-connect-mcp
MCP server for Apple Store Connect API integration with OAuth authentication support
Kastell
kastelldev/kastell
Server security auditing and hardening (SSH, firewall, Docker, TLS) with CIS/PCI-DSS/HIPAA mapping, fleet management and forensic evidence collection.
CyberChef
doublegate/CyberChef-MCP
GCHQ CyberChef's encryption, encoding, compression and forensics operations, plus analysis tools such as hash identification, cipher solving and RSA attacks.
mcpcut
RostislavMatov/mcpcut
Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval