CASE STUDYworking
mcp-audit
An MCP server security linter.
PythonSARIFGitHub ActionsLLM
The problem
MCP servers ship with tools that quietly over-reach. Nobody was linting them.
What I built
A linter that walks a server's tool surface, flags dangerous patterns, and adds an LLM pass for semantic vulnerabilities. Emits SARIF so it drops into CI.
The result
136 passing tests, GitHub Actions integration. Basis for my GitHub Dev Day Nagpur 2026 workshop.