{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_8bhpmbre8wfm","handle":"readystack-mcp-config-audit","url":"https://wellknown.network/agents/readystack-mcp-config-audit","links":{"self":"https://wellknown.network/agents/readystack-mcp-config-audit/record.json","html":"https://wellknown.network/agents/readystack-mcp-config-audit","markdown":"https://wellknown.network/agents/readystack-mcp-config-audit/record.md","api":"https://wellknown.network/api/v1/agents/readystack-mcp-config-audit","status":"https://wellknown.network/api/v1/agents/readystack-mcp-config-audit/status","claim":"https://wellknown.network/agents/readystack-mcp-config-audit/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/readystack-mcp-config-audit/claim.json","badge":"https://wellknown.network/agents/readystack-mcp-config-audit/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/readystack-mcp-config-audit/history","tools":"https://wellknown.network/api/v1/agents/readystack-mcp-config-audit/tools"},"ard":{"identifier":"urn:air::server:readystack-mcp-config-audit","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"readystack-mcp-config-audit","summary":"Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, plaintext remote servers, shell wrappers, auto-approved tools, whole-machine filesystem roots — with li (bundled Node.js runtime)","description":"# MCP Server Config Audit\n\n> Runs the same checker as the npm package `@readystack/mcp-config-audit` on a Node.js runtime that pip installs for you (`nodejs-wheel-binaries`) - no system Node.js needed. Your files are checked locally.\n\nAudit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, plaintext remote servers, shell wrappers, auto-approved tools, whole-machine filesystem roots — with line numbers. The shipped sample config _fixtures/dirty.mcp.json (33 lines, five servers) returns 14 findings, 8 of them blocking.\n\n## Install\n\n```\nmcp-config-audit file\n```\n\nNode 18+. The same 18 rules as the VS Code extension, from a terminal or CI.\n\n## Free\n\n- Audit one mcp.json against all 18 rules and get every inline credential, unpinned launch and over-broad grant named with its line number and its replacement. The extension ships a sample config, _fixtures/dirty.mcp.json, 33 lines and five servers, which returns 14 findings, 8 of them blocking, and its corrected twin _fixtures/clean.mcp.json, which returns zero.\n- `--rules` lists every rule\n\n## With a licence ($29 once)\n\n- Audit every agent config in a repository and in the user-scope locations for VS Code, Cursor, Claude Desktop and Windsurf in one pass, fail CI with a non-zero exit code on any blocker, and export a dated evidence report of file, rule and line.\n\n```\n@readystack/mcp-config-audit --dir ./templates --report html --out report.html\n```\n\nFreelance application-security engineers commonly bill $100-$200 an hour; a single review hour costs more than three licences, and the config changes every time somebody adds a server.\n\n## Use from an AI agent (MCP)\n\nClaude Code · Cursor · Windsurf · any MCP client - add to your MCP config:\n\n```json\n{ \"mcpServers\": { \"mcp-config-audit\": { \"command\": \"npx\", \"args\": [\"-y\", \"@readystack/mcp-config-audit\", \"--mcp\"] } } }\n```\n\nTools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line numbe…","publisher":null,"homepage":"https://getreadystack.com/tools/mcp-config-audit?ref=pypi","repository":null,"version":"1.0.7.post1","license":"Proprietary - see LICENSE.txt","protocols":["mcp"],"tags":["mcp","mcp.json","model","context","protocol","ai","agent","security","copilot","cursor","claude"],"pricing":null,"endpoints":[{"url":"pypi:readystack-mcp-config-audit","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.filesystem","name":"Filesystem","confidence":1,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.791,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.756,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"readystack-mcp-config-audit","registry":"pypi","observedAt":"2026-10-24T18:29:03.358Z","publishedAt":"2026-09-30T10:50:48.386477Z","latestVersion":"1.0.7.post1"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"readystack-mcp-config-audit","url":"https://pypi.org/project/readystack-mcp-config-audit/","firstSeenAt":"2026-09-30T11:24:51.195Z","fetchedAt":"2026-10-24T18:28:14.230Z","normalizedAt":"2026-10-24T18:28:14.230Z"}]},"firstSeenAt":"2026-09-30T11:24:51.195Z","updatedAt":"2026-10-24T18:29:03.358Z"}