$ loading_
Statically audit an MCP server's blast radius before installation.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "MCP Blast-Radius Auditor" MCP server from askskill: Run: claude mcp add 'io-github-aos-standard-mcp-blast-radius' -- uvx mcp-blast-radius
Developers or DevOps teams can run a static blast-radius audit before installing a new MCP server to understand likely impact scope and security exposure in advance.
When an MCP server does not provide a manifest, teams can still run an initial static audit to decide whether it should move forward to deeper review or installation.
It performs a static blast-radius audit on an MCP server before agent installation. The goal is to assess potential impact scope in advance rather than after deployment.
Not necessarily. The description explicitly says the manifest is optional, so auditing can still be done without one.
Based on the description, it is a static audit tool focused on pre-install blast-radius assessment. For deeper implementation details and comparisons with other tools, see the source repository.
Scan configured MCP servers locally and generate inventory with risk scores.
Audit MCP server vulnerabilities with a local LLM and attack-pattern retrieval.
Scan MCP servers for runtime, static, config, dependency, and compliance risks.
Audit MCP configs for exposed access, secrets, models, and compliance AI-BOMs.
Review MCP servers for quality, security, scores, and improvement plans.
Statically scan MCP servers, skills, and plugins for security risks.