MCP server that audits npm package dependencies for security vulnerabilities, using remote npm registry integration for real-time checks. It produces vulnerability reports with severity levels (critical, high, moderate, low), CVSS scores, and CVE references, along with automatic fix recommendations, and is compatible with npm, pnpm, and yarn package managers.
To add qianniuspace/mcp-security-audit to Claude, run the install command below or copy the ready-made config for Claude Code, Claude Desktop, Cursor and VS Code further down. Restart your client after adding it and its tools show up in your next conversation.
Install
npx -y -y @smithery/cliInstall with your client
claude mcp add qianniuspace-mcp-security-audit -- npx -y @smithery/cli
Run this in a terminal to add the server to Claude Code.
What this does
qianniuspace/mcp-security-audit exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.
Frequently asked questions
How do I install qianniuspace/mcp-security-audit?
Run the Claude Code command in the install section to add qianniuspace/mcp-security-audit to Claude Code, or copy the ready-made config for your client from the install section on this page. Restart your client afterwards and the tools appear in your next conversation.
Which clients work with qianniuspace/mcp-security-audit?
This page carries setup and config for Claude Code, Claude Desktop, Cursor and VS Code. Any other MCP client that accepts a standard server config can connect to qianniuspace/mcp-security-audit as well.
Does qianniuspace/mcp-security-audit need an API key?
This listing does not ask for an API key or any environment variables.
What license is qianniuspace/mcp-security-audit under?
qianniuspace/mcp-security-audit is listed under the MIT license.
Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.
Is this your MCP server?
Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.
Add this badge to your README
Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.
[](https://clauderules.net/mcp/qianniuspace-mcp-security-audit)<a href="https://clauderules.net/mcp/qianniuspace-mcp-security-audit" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/qianniuspace-mcp-security-audit" alt="Listed on clauderules.net" /></a>More TypeScript MCP servers
netdata/netdata#Netdata
🎖️ 🏠 ☁️ 📟 🍎 🪟 🐧 - Discovery, exploration, reporting and root cause analysis using all observability data, including metrics, logs, systems, containers, processes, and network connections
upstash/context7
📇 ☁️ - Up-to-date code documentation for LLMs and AI code editors.
microsoft/playwright-mcp
Official Microsoft Playwright MCP server, enabling LLMs to interact with web pages through structured accessibility snapshots
agent-infra/mcp-server-browser
📇 🏠 - Browser automation capabilities using Puppeteer, both support local and remote browser connection.