{"slug": "show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers", "title": "Show HN: MCP Security Auditor – Zero-execution static scanner for MCP servers", "summary": "Neon Innovation Lab released MCP Security Auditor, a zero-execution static scanner for Model Context Protocol (MCP) servers priced at $0.25 per server audited, detecting vulnerabilities such as command injection (CWE-78), path traversal (CWE-22), secret leaks (CWE-798), and unauthenticated transports. The tool generates trust scores and remediation reports, addressing 30+ CVE disclosures against MCP tools in 2025 and 2026.", "body_md": "MCP Security & Vulnerability Auditor (2026)\n\nPricing\n\n$0.25 / mcp server audited\n\n[Go to Apify Store](/store)\n\n# MCP Security & Vulnerability Auditor (2026)\n\nZero-execution security scanner for Model Context Protocol (MCP) servers. Audits for Command Injection (CWE-78), Path Traversal (CWE-22), Secret Leaks (CWE-798), and Unauthenticated Transports. Generates verified Trust Scores and remediation reports.\n\nPricing\n\n$0.25 / mcp server audited\n\nRating\n\n0.0\n\n(0)\n\nDeveloper\n\n[Maintained by Community](/neon_innovation_lab)\n\nNeon Innovation Lab\n\nActor stats\n\n0\n\nBookmarked\n\n2\n\nTotal users\n\n1\n\nMonthly active users\n\n3 minutes ago\n\nLast modified\n\nCategories\n\nShare\n\nA zero-execution security auditor and trust scoring engine for **Model Context Protocol (MCP)** servers.\n\nDetect critical remote code execution (RCE), arbitrary file access, credential leaks, and transport security flaws in any MCP repository before connecting it to your AI agents, Claude Desktop, or Cursor environments.\n\n## 🛡️ Why Use This Actor?\n\nWith thousands of MCP servers published across registries, AI agents have direct access to filesystems, command lines, and internal databases.\n\nFollowing 30+ CVE disclosures against MCP tools in 2025 and 2026, standard security practices now require continuous verification of third-party tools.\n\nUnlike standard runtime scanners that attempt to run arbitrary `stdio`\n\ncommands defined in target configs (creating severe RCE hazards for the scanning host), this Actor uses **pure static AST analysis**. It inspects the source code syntax tree and configurations without executing untrusted code.\n\n## 🔍 Vulnerability Checks Covered\n\n| Rule ID | Severity | CWE | Description |\n|---|---|---|---|\nMCP-SEC-001 | CRITICAL | CWE-78 | Command Injection: Detects `subprocess.run(shell=True)` , `os.system()` , and dynamic string interpolation in shell calls. |\nMCP-SEC-002 | HIGH | CWE-22 | Path Traversal / Arbitrary File Access: Detects file read/write tools lacking strict root boundary checks (`Path.is_relative_to()` or `commonpath` ), as well as ZipSlip/TarSlip archive extractions. |\nMCP-SEC-003 | CRITICAL | CWE-798 | Credential & Secret Exposure: Scans for leaked OpenAI, Anthropic, GitHub, AWS, and Slack keys, and flags tools returning raw `os.environ` . |\nMCP-SEC-004 | HIGH | CWE-306 | Unauthenticated Remote Transport: Flags SSE / HTTP endpoints bound to `0.0.0.0` without authentication tokens. |\nMCP-SEC-005 | HIGH | CWE-1384 | Tool Poisoning & Prompt Injection: Flags adversarial instructions and zero-width homoglyph obfuscation in tool docstrings and descriptions. |\n\n## 📥 Input Configuration\n\n```\n{  \"repositoryUrls\": [    \"https://github.com/modelcontextprotocol/servers\"  ],  \"subDirectories\": [    \"src/everything\",    \"src/fetch\"  ],  \"minimumPassScore\": 80}\n```\n\n`repositoryUrls`\n\n*(Required)*: List of public Git URLs for the MCP server repositories to audit.`subDirectories`\n\n*(Optional)*: List of subdirectories to audit individually (ideal for monorepos).`minimumPassScore`\n\n*(Optional, Default:*: The minimum Trust Score (0–100) required to consider the repository passed.`80`\n\n)\n\n## 📤 Output\n\n### 1. Structured Dataset Records\n\nEach audited server produces a structured JSON record containing:\n\n`trust_score`\n\n: Score from`0`\n\nto`100`\n\n.`grade`\n\n: Security letter grade (`A+`\n\n,`A`\n\n,`B`\n\n,`C`\n\n,`F`\n\n).`passed`\n\n: Boolean indicating if the score meets`minimumPassScore`\n\n.`findings`\n\n: Array of detailed findings with file paths, line numbers, CWE IDs, code snippets, and specific remediation advice.\n\n### 2. Downloadable Markdown Report\n\nThe full human-readable audit report is saved to the run's default Key-Value store under ** OUTPUT_REPORT.md**.", "url": "https://wpnews.pro/news/show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers", "canonical_source": "https://apify.com/neon_innovation_lab/mcp-security-auditor", "published_at": "2026-09-04 11:19:48+00:00", "updated_at": "2026-09-04 11:53:51.643352+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "ai-infrastructure"], "entities": ["Neon Innovation Lab", "MCP Security Auditor", "Model Context Protocol", "Claude Desktop", "Cursor"], "alternates": {"html": "https://wpnews.pro/news/show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers", "markdown": "https://wpnews.pro/news/show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers.md", "text": "https://wpnews.pro/news/show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers.txt", "jsonld": "https://wpnews.pro/news/show-hn-mcp-security-auditor-zero-execution-static-scanner-for-mcp-servers.jsonld"}}