mcp-security-auditA powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.

— (0)

Reviewed by Daniel Nikulshyn·Updated July 2026

Overview

mcp-security-audit is a powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. It integrates with the remote npm registry for real-time security checks. The tool is designed to help developers identify and address potential security issues in their projects. It provides detailed vulnerability reports, including severity levels, fix recommendations, CVSS scores, and CVE references. The tool supports multiple severity levels (critical, high, moderate, low) and is compatible with npm, pnpm, and yarn package managers.

Key features

Real-time security vulnerability scanning
Remote npm registry integration
Detailed vulnerability reports with severity levels
Support for multiple severity levels (critical, high, moderate, low)
Compatible with npm/pnpm/yarn package managers
Automatic fix recommendations

Pricing

Model: Free
Category: MCP Servers
Rating: No reviews yet

Use cases

Security Audit

Perform a security audit on npm package dependencies to identify potential vulnerabilities

Vulnerability Management

Use the tool to manage vulnerabilities in a project, including identifying severity levels and recommended fixes

Pros & Cons

Pros

Real-time security vulnerability scanning
Detailed vulnerability reports with severity levels
Automatic fix recommendations
CVSS scoring and CVE references
Support for multiple severity levels

Cons

Limited to npm package dependencies
Requires MCP configuration for integration

Reviews

Sign in to leave a review.

No reviews yet. Be the first!

Q&A

Are there any limitations to the tool's functionality?

Yes, it is limited to auditing npm package dependencies for security vulnerabilities and requires MCP configuration for integration.

Asked by Ivana Novak · Jan 9, 2026

What information is included in vulnerability reports?

Detailed vulnerability reports include severity levels, fix recommendations, CVSS scores, and CVE references.

Asked by Omar Haddad · Nov 19, 2025

Can it scan for vulnerabilities in real-time?

Yes, it provides real-time security vulnerability scanning with remote npm registry integration.

Asked by Ivo Novotný · Nov 11, 2025

What package managers are supported?

The tool is compatible with npm, pnpm, and yarn package managers.

Asked by Tunde Balogun · Nov 8, 2025

Ask a question

MCP Servers alternatives

Playwright MCP interface preview

Playwright MCPMCP Servers

Open-source MCP server that lets LLMs drive real browsers via Playwright and accessibility snapshots.

Pydantic AI interface preview

Pydantic AIMCP Servers

Python agent framework from the Pydantic team for building type-safe GenAI apps.

Cognee interface preview

CogneeMCP Servers

Adaptive memory layer that helps AI agents learn from context over time.

Inbox Zero interface preview

Inbox ZeroMCP Servers

AI email assistant that organizes, drafts replies, and helps you reach inbox zero faster.

Screenpipe interface preview

ScreenpipeMCP Servers

Open-source 24/7 local screen and audio recording for building context-aware AI apps

AgentKit interface preview

AgentKitMCP Servers

TypeScript library for building and orchestrating AI agents with tools, memory, and multi-agent workflows.

onchain-mcpMCP Servers

Bringing the bankless onchain API to MCP

markitdownMCP Servers

Python tool for converting files and office documents to Markdown.