mcp-audit

mcp-audit is an offline security scanner and committable lock for the MCP servers your AI coding tools run.

pip install mcp-audit-scanner

PyPI package name is mcp-audit-scanner; the CLI command is mcp-audit.

Lock the MCP servers you approved

mcp-audit lock                      # Write mcp-lock.json, commit it
git add mcp-lock.json && git commit -m "Lock approved MCP servers"

mcp-audit lock --verify             # ...someone edits a server's config...

LOCK-001  Server drifted from lock: 'notion'
  identity: locked={'args': ['-y', '@notionhq/notion-mcp-server'], 'command': 'npx'} now={'command': 'npx', 'args': ['-y', '@notionhq/[email protected]']}
Lock: 2 servers checked; not verified: trees (see docs/lock.md)

lock --verify exits 1 — the command CI runs to fail a pull request. Review the change, then approve it:

mcp-audit lock --accept
mcp-audit lock --verify

Lock: 2 servers verified; not verified: trees (see docs/lock.md)

• Records: client, server name, package name + resolved version + integrity hash, and environment/header variable names — never values.
• Never records: environment/header values, absolute filesystem paths, hostname, or username.
• lock --verify runs entirely offline and exits non-zero on drift or on anything it could not verify.
• lock --accept is the explicit “I reviewed this” step after a failed --verify.
• lock --connect also records a digest of every tool each server lists; lock --verify --connect reports tools added, changed, or removed (LOCK-006…009).

lock is experimental in this release (lock_version 1); the file shape may change before it is frozen — see docs/lock.md.

Reproduce this exact sequence yourself: demo/lock/run.sh, or regenerate the recording above with docs/media/lock-demo.tape (vhs docs/media/lock-demo.tape).

---

Privacy-first security scanner for MCP server configurations.

Free & open source. Apache 2.0, all features included — no paid tier, no license keys required.

Privacy-first: mcp-audit collects no telemetry. Every scan runs locally. See docs/telemetry.md for the full policy.