Codeaudit MCP Server
by infoinlet-marketplaceio.github.infoinlet-marketplace/mcp-codeauditv0.1.1
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
context tax
queued
security
queued
cold start
queued
freshness
Slowing4mo ago
Install Codeaudit MCP server
Install in Claude Code
claude mcp add codeaudit -- npx -y @infoinlet/mcp-codeauditInstall in Cursor
{
"mcpServers": {
"codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"codeaudit": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"codeaudit": {
"command": "npx",
"args": [
"-y",
"@infoinlet/mcp-codeaudit"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Freshness
Slowing — last maintenance signal 4mo ago. The newest of the signals below sets the band.
Last commit (default branch)
no data · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-05-29 · 4mo ago · official registry · v0.1.1
FAQ
›How do I install the Codeaudit MCP server in Claude Code?
Run: claude mcp add codeaudit -- npx -y @infoinlet/mcp-codeaudit. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Codeaudit require an API key?
No required environment variables are declared in its published metadata.
›Can I use Codeaudit as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Codeaudit in the official MCP registry?
Yes, as io.github.infoinlet-marketplace/mcp-codeaudit.
Alternatives to Codeaudit
Other security MCP servers.
SemgrepActiveScan code for security vulnerabilities using Semgrep.
Ida ProActiveIDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.
GhidraAbandonedAutonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.
Robin: AI-Powered Dark Web OSINTActiveDark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Claude Code Ultimate GuideActiveSearch the Claude Code Ultimate Guide, official Anthropic documentation, releases, examples, security references, agent harness data, and translations from any MCP-compatible client.
Jadx AIActiveJADX decompiler plugin providing live, LLM-assisted reverse engineering.