Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
SecureMCP
SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context Protocol (MCP)](https://modelcontextprotocol.io/introduction). It proactively identifies threats like OAuth token leakage, prompt injection vulnerabilities, rogue MCP servers, and tool
140stars
18forks
Go
ai-securitycli-toolcli-toolsgolangllm-securitymcpoauthprompt-injectionsecurity-scanner
Quality signals
StaleNo testsNo CIThin docsNo licensePopular
AI summary
Auto-generated overview of what this skill does and when to reach for it.
A security scanner that finds OAuth leaks, prompt injection flaws, and server misconfigurations in applications using the Model Context Protocol.
Use this when
- You need to check an MCP server for OAuth token leaks
- You want to test prompt injection vulnerabilities in AI tools
- You're auditing MCP server authentication methods
- You need HTML or JSON reports for compliance documentation
- You're integrating MCP into a CI/CD pipeline
Don't use when
- You're auditing non-MCP applications
- You need a general web vulnerability scanner
- You want to test standard REST APIs
Capabilities
- Scans for OAuth token storage and validation issues
- Tests prompt injection at multiple positions in tool calls
- Validates SSL/TLS and authentication configurations
- Generates HTML and JSON reports with severity levels
- Detects rogue MCP servers and tool poisoning
- Checks for HSTS and CSP header compliance
Install
Universal installANY TOOL
$ npx skillcity@latest makalin/SecureMCPAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Prefer to set it up by hand? Clone the repository:
git clone https://github.com/makalin/SecureMCP.git
Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
securemcp — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt