该仓库包含 audithub-mcp 的源代码，这是一个 审计中心。

audithub-mcp 允许基于大型语言模型的代理访问以下功能：

• 发现关于AuditHub组织和项目的信息
• 启动和监控AuditHub工具任务
• 访问AuditHub相关问题和发现

设计上，MCP服务器将功能限制为只读且非破坏性。 通过配置文件可以启用更多功能。

警告： 大型语言模型可能会犯错。在操作前请手动验证所有工具输出。

先修条件

• Python 3.12+
• 紫外线

该软件包将PAQL捆绑为Emscripten WebAssembly模块。其跨平台Node.js 运行时会自动作为 Python 依赖安装，因此 validate_paql 不需要 系统PAQL或Node.js安装。

安装

audithub-mcp 以 Python 包形式实现，但尚未在 PyPI 中提供。 你必须直接从这个仓库安装它。

全球安装

如果你使用的是 uv 包管理器，可以使用 uv 安装 audithub-mcp：

本地克隆

引用仓库根：

AuditHub MCP Server

This repository contains the source code of audithub-mcp, an MCP server for AuditHub.

audithub-mcp allows LLM-based agents to access functionality such as:

• Discovering information about AuditHub organizations and projects
• Launching and monitoring AuditHub tool tasks
• Accessing AuditHub issues and findings

By design, the MCP server limits the functionality to be read-only and non-destructive. Additional features can be enabled through the configuration file.

Warning: LLMs can make mistakes. Verify all tool outputs manually before acting on them.

Prerequisites

• Python 3.12+
• uv

The package bundles PAQL as an Emscripten WebAssembly module. Its cross-platform Node.js runtime is installed automatically as a Python dependency, so validate_paql does not require a system PAQL or Node.js installation.

Installation

audithub-mcp is implemented as a Python package, but it is not yet available in PyPI. You must install it directly from this repository.

Global Installation

If you are using the uv package manager, you can install audithub-mcp using uv:

uv tool install 'git+https://github.com/Veridise/audithub-mcp'
audithub-mcp --help

AuditHub MCP uses the MCP Python SDK v2 API (mcp>=2.3.0,<3). To replace an older installation, including one installed with an explicit mcp<2 constraint, install the updated checkout from its repository root:

uv tool install --force .
audithub-mcp --help

Local Clone

From the repo root:

uv venv
uv sync --active

If your virtual environment is already active and you just want to run the server entrypoint, use:

uv run audithub-mcp --help

Using audithub-mcp

To use audithub-mcp, you need to configure two parts: your agent and the audithub-mcp config file. Once both are configured, the agent should automatically start the MCP server and use its tools.

Agent Configuration

To enable audithub-mcp in your agent, you must add it to the MCP server config for your agent.

The following examples assume that audithub-mcp is available on PATH, and that your config file is located at ~/.config/audithub-mcp/config.yaml.

• Codex CLI
  • For interactive setup, use codex mcp add audithub-mcp
  • If you want to set it up with a config file, add the following to your .codex/config.toml:

    [mcp_servers.audithub-mcp]
    command = "audithub-mcp"
    args = ["--config", "~/.config/audithub-mcp/config.yaml"]
    

• Claude Code
  • For interactive setup, use claude mcp add audithub-mcp audithub-mcp
  • If you want to set it up with a config file, add the following to your .claude/mcp.json:

    {
      "mcpServers": {
        "audithub-mcp": {
          "command": "audithub-mcp",
          "args": [
            "--config",
            "~/.config/audithub-mcp/config.yaml"
          ]
        }
      }
    }