Repo Auditor MCP Server

by nikhilgupta15

Local MCP server that audits your git changes against the repo's own AI rules (AGENTS.md, CLAUDE.md, .cursorrules, Copilot, Kiro, skills) and returns a compliance table or an HTML report.

0Node.jsstdio

context tax

pending

security

97/100

cold start

pending

freshness

Active7d ago

Our reading of Repo Auditor, from the data

Repo Auditor is a version control MCP server from nikhilgupta15.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was 7 days ago (2026-10-11). For comparison, 65% of version control servers are active or maintained.

With 0 GitHub stars it ranks #360 of 725 version control servers we index.

It runs locally on your machine over stdio.

Install Repo Auditor MCP server

claude mcp add repo-auditor -- npx -y mcp-repo-auditor

{
  "mcpServers": {
    "repo-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-repo-auditor"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "repo-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-repo-auditor"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "repo-auditor": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-repo-auditor"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "repo-auditor": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-repo-auditor"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

No security policy (SECURITY.md)-3

Checks

✓Repository hygiene (archived, activity, license, security policy)
○Package metadata (install scripts, provenance) — pending
○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 7d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-11 · 7d ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry

How it compares in Version Control

Against the most-starred version control servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
Repo Auditor (this)	0	—	not measured	Active	local
Git	91,356	—	not measured	Active	local
PostHog	40,338	—	not measured	Active	local + hosted
GitHub	33,740	—	not measured	Active	local + hosted
GitDiagram	18,313	3	864	Active	hosted
Skill Seekers	15,180	—	not measured	Active	—

All version control MCP servers

FAQ

›How do I install the Repo Auditor MCP server in Claude Code?

Run: claude mcp add repo-auditor -- npx -y mcp-repo-auditor. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does Repo Auditor require an API key?

No required environment variables are declared in its published metadata.

›Can I use Repo Auditor as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is Repo Auditor in the official MCP registry?

No. It was indexed from npm.

Sources and method

GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Security signals, computed by us: 2026-10-19
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.