ModelContextProtocol-Security/audit-db

Name: ModelContextProtocol-Security/audit-db
Rating: 60 (1 reviews)
Author: ModelContextProtocol-Security

MCPcommunity

ModelContextProtocol-SecurityApache-2.0Updated 5mo agoGitHub

Community-maintained database of MCP server audit results and security assessments. Contains structured audit findings, compliance reports, and security ratings to help organizations evaluate MCP server safety and make informed deployment decisions. The Audit Database is a transparent, community-driven repository of comprehensive MCP server audits. Unlike traditional vulnerability databases that…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

10GitHub stars

3Forks

5mo agoLast update

Package

AuthorModelContextProtocol-Security

LicenseApache-2.0

Sourcegithub

GitHubModelContextProtocol-Security/audit-db

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/25

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/10

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—CVE scan · not run+0/30

→ Not yet scanned — package must be on npm

✓Static analysis · clean+20/20

—npm provenance (Sigstore)+0/5

→ Publish from GitHub Actions with the --provenance flag

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

DependenciesNot audited

Tool surface—

Security scan✓ CleanvHEAD · 19d ago

EvalsNone

IndexedMay 24, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About