apisec-inc / mcp-audit
See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.
Why this job: name: mcp; topics: model-context-protocol, mcp
What it does
- Secrets. Exposed API keys, tokens, database passwords
- APIs. Every endpoint your AI agents connect to
- AI Models. Which LLMs are configured (GPT-4, Claude, Llama)
- Risk Flags. Shell access, filesystem access, unverified sources
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 2 months ago
- Stars
- 166
- +1 this week
- Licence
- MIT
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v1.0.0
- Released 9 months ago
- Built with
- Python
- 60% of the code
Is it looked after?
- Contributors
- 1
- Last 90 days
- Issues
- 0% closed
- 2 still open
- Pull requests
- 2 merged
- 4 waiting
- Releases
- 1
- 1 in the last year
- Contributing guide (opens in new tab)
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| salemalem / npmscan-mcp-plugin | 503 | 2 days ago | MIT | No downloads |
| Goldziher / ai-rulez | 169 | yesterday | MIT | Mac, Windows, Linux |
| KryptosAI / mcp-observatory | 120 | 20 days ago | MIT | No downloads |
More: languages, topics and project record
Languages
- Python 60%
- JavaScript 22%
- HTML 6%
- CSS 5%
Topics
- agent-security
- ai
- ai-bom
- ai-security
- api-inventory
- appsec
- claude
- cursor
- cyclonedx
- devsecops
- llm
- mcp
Project record
- JobMCP servers
- StatusListed
- Commits69
- Forks45
- Watching4
- Stars in 28 days+2
- CreatedDec 12, 2025
- First seen by usNov 7, 2026
- CheckedNov 7, 2026