AgentIndex icon
AgentIndex
mcptrustchecker logo
mcptrustchecker
★ 172
vs
cc-audit logo
cc-audit
★ 26

mcptrustchecker vs cc-audit

mcptrustchecker: MCP Trust Checker is a local-first, deterministic security scanner that evaluates the safety of Model Context Protocol (MCP) servers. It utilizes a unique Capability-Flow Trust Model to statically identify potential data exfiltration paths and other vulnerabilities before you connect servers to sensitive data.; cc-audit: cc-audit is a security auditor designed for Claude Code skills, hooks, and MCP servers. It scans third-party Claude Code artifacts to detect security vulnerabilities such as data exfiltration and privilege escalation before installation, closing a critical security gap in the rapidly growing Claude Code ecosystem.

01

TL;DR

mcptrustchecker logo
mcptrustcheckerSecurity & Safety · ★ 172

Scanning already installed MCP servers or local package directories for vulnerabilities.

Read mcptrustchecker full review →
cc-audit logo
cc-auditSecurity & Safety · ★ 26

Preventing Data Exfiltration

Read cc-audit full review →
02

Side-by-Side Comparison

Field
mcptrustchecker logomcptrustchecker
cc-audit logocc-audit
Category
Security & Safety
Security & Safety
Stars
★ 172
★ 26
License
MIT
MIT
Install Command
npm i -g mcptrustchecker
cargo install cc-audit
Updated
2mo ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Security Scanner, Static Analysis, Trust Model
Security Audit, Vulnerability Scanning, Static Analysis
03

Features

mcptrustchecker logomcptrustchecker
01Offline by Default: Operates without requiring an account, token, API key, or hosted service, ensuring data privacy.
02Cross-Tool Toxic-Flow Graph: Identifies lethal trifecta scenarios where untrusted input, sensitive data, and external exfiltration paths coexist across multiple tools.
03Deep-Scans Published Packages: Fetches, verifies, and analyzes the actual published source code from npm/PyPI without installation or execution.
04Auditable Trust Score: Provides a deterministic A-F grade with a transparent scoring methodology, including penalty vectors and confidence levels.
05Rug-Pull Integrity: Detects post-approval mutations of tool definitions and verifies package artifact hashes to prevent silent changes.
cc-audit logocc-audit
01Extensive Security Rules
02Multi-Artifact Scanning
03AI Client Compatibility
04Remote Repository Analysis
05Automated Issue Remediation
04

Use Cases

mcptrustchecker logomcptrustchecker
↳Scanning already installed MCP servers or local package directories for vulnerabilities.
↳Auditing live HTTP/SSE or OAuth-protected remote MCP endpoints before integration.
↳Integrating into CI/CD pipelines (e.g., GitHub Actions) to enforce security gates and generate SARIF reports.
↳Embedding the scanning engine into marketplaces or platforms to verify the security of listed MCP servers.
↳Using the free hosted web API for quick, zero-install security checks of tool manifests or published packages.
cc-audit logocc-audit
↳Preventing Data Exfiltration
↳Mitigating Privilege Escalation
↳Ensuring AI Supply Chain Security
↳Integrating into CI/CD Pipelines for automated security checks
↳Runtime monitoring of AI agent interactions
FAQ

FAQ

What is the difference between mcptrustchecker and cc-audit?
Both mcptrustchecker and cc-audit are in the Security & Safety category. mcptrustchecker has 172 stars, while cc-audit has 26 stars.
Which is better, mcptrustchecker or cc-audit?
The best choice depends on your use case. Choose mcptrustchecker if Scanning already installed MCP servers or local package directories for vulnerabilities., and cc-audit if Preventing Data Exfiltration.
Is mcptrustchecker free or open source?
Yes, mcptrustchecker is open source on GitHub (MIT).
Is cc-audit free or open source?
Yes, cc-audit is open source on GitHub (MIT).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to mcptrustchecker →Alternatives to cc-audit →mcptrustchecker details →cc-audit details →