Release notes from mcp-audit
Articles about Release notes from mcp-audit
Release v0.19.1 · adudley78/mcp-audit
mcp-audit v0.19.1 Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, supply chain risks, credential exposure, toxic flow combinations, transport vulnerabilities, and more — across Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible host. Fixed A scan run inside a repository now reads its Claude Code settings (STORY-0082). .claude/settings.json and .claude/settings.local.json in the working directory are discovered alongside .mcp.json (client
Release v0.19.0 · adudley78/mcp-audit
mcp-audit v0.19.0 Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, supply chain risks, credential exposure, toxic flow combinations, transport vulnerabilities, and more — across Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible host. Upgrade note: a default scan (and check, dashboard, shadow, sbom) now also reads ~/.claude/settings.json and installed Claude Code plugins, so a developer machine can show new findings and a lower grade after upgrading. That is
Release v0.18.2 · adudley78/mcp-audit
mcp-audit v0.18.2 Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, supply chain risks, credential exposure, toxic flow combinations, transport vulnerabilities, and more — across Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible host. Fixed scan/check auto-verify no longer reports every locked server as both unlocked and missing (R60-01). mcp-audit lock → lock --verify (exit 0) → mcp-audit check used to grade D/F with LOCK-002 and LOCK-003 for the
Release v0.18.1 · adudley78/mcp-audit
mcp-audit v0.18.1 Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, supply chain risks, credential exposure, toxic flow combinations, transport vulnerabilities, and more — across Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible host. Added mcp-audit lock now flags deprecated packages: new SC-005 finding (STORY-0073). When lock (or lock --verify --resolve) resolves an unpinned spec to a version the package registry
Release v0.18.0 · adudley78/mcp-audit
mcp-audit v0.18.0 Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, supply chain risks, credential exposure, toxic flow combinations, transport vulnerabilities, and more — across Claude Desktop, Cursor, VS Code, Windsurf, and any MCP-compatible host. Why a minor bump, not a patch: this release ships the R56 exit-code behaviour change documented under Changed below. A CI pipeline that is passing today on v0.17.0 because of that