mcp-tool-card-linter Alternatives

mcp-risk-linter is an open-source CLI tool that analyzes MCP server tools for readiness and security risks, including authentication, filesystem, shell, and network vulnerabilities. It helps developers and DevOps teams ensure safer deployments.

mcp-tool-auditor is an open-source command-line tool designed for security researchers to scan and pentest MCP servers. It provides both defensive scanning and offensive pentesting capabilities, mapping to the OWASP MCP Top 10. The tool helps identify and mitigate security vulnerabilities in AI and LLM-related infrastructures.

mcp-mcts is an open-source CLI tool for local MCP security scanning, attack chain analysis, inventory management, and CI integration. It supports optional Semgrep and LLM analysis, making it suitable for security engineers and DevOps teams focused on codebase security.

Linter for MCP (Model Context Protocol) config files used by Claude Desktop, Cursor, Cline, Windsurf, and Zed. CLI + library API.

covenant-mcp is an open-source CLI tool that lints contracts for MCP (Model Context Protocol) servers, helping developers catch breaking schema changes before deployment. It is designed for teams building agent infrastructure and tools using MCP.

mcp-check-security is an open-source command-line tool that performs offline security checks on Model Context Protocol (MCP) server configurations. It helps developers and security engineers identify potential vulnerabilities and misconfigurations before deployment. The tool is designed for use in AI infrastructure environments.

mcpvet is an open-source CLI tool that combines testing, linting, and contract validation for MCP servers. It integrates with pytest and ESLint, streamlining the development and quality assurance process for developers working with the Model Context Protocol.

mcp-toolguard is a tool designed to monitor contracts, detect drift, and perform security checks for MCP servers in both continuous integration (CI) environments and production. It addresses the problem of silent breaking changes in MCP server contracts that can disrupt agent operations without triggering build failures or type-checking errors. By capturing a canonical snapshot of a server's tools, schemas, and capabilities, mcp-toolguard enables versioned contract management directly within a repository, using a deterministic hash to ensure consistency. The tool employs a single engine that operates across three layers: contract validation, drift detection, and security analysis. json file, which is committed and versioned with the codebase. Drift detection classifies every change as breaking, compatible, or suspicious, using semantic diffing rather than simple text comparison. This process highlights removals and type changes as breaking, additions as compatible, and changes to descriptive text as suspicious, identifying potential prompt-injection surfaces. Security checks are enforced through 15 rules targeting threats such as tool poisoning, credential-shaped parameters, cross-tool coercion, and hidden characters, with each finding accompanied by supporting evidence. mcp-toolguard integrates with CI pipelines through a GitHub Action and can be run via the command line interface. It supports scheduled checks and alerts in production, including notifications through Slack or webhooks. The tool validates server contracts against both the current and upcoming MCP specification versions, providing independent reports for each to anticipate future breaking changes. The baseline is the accepted state, and only new findings block CI or trigger production alerts. The platform offers a free tier that operates entirely offline, requiring no signup and minimal setup. mcp-toolguard is open source and distributed under the MIT license, with installation available via pip. It is suitable for teams managing MCP servers who need to ensure contract stability, detect unauthorized changes, and enforce security policies throughout the software lifecycle.

mcp-toolsmith is an open-source CLI utility for auditing and compiling Python tool schemas for use with LLM agents. It validates schemas against the Model Context Protocol, helping developers ensure compatibility and correctness before deployment.

mcp-strike is an open-source command-line tool designed for active, runtime adversarial testing of Model Context Protocol (MCP) servers. It helps security engineers and red teams identify vulnerabilities and weaknesses by simulating attacks and scanning for issues. The tool supports automated security assessments and is freely available under the MIT license.

mcp-checkup is an open-source CLI utility that audits MCP server setups, measuring context tax and hygiene. It helps AI infrastructure engineers and developers ensure their Model Context Protocol servers are efficient and healthy by providing detailed health checks and token analysis.

mcp-security-scan is an open-source CLI tool that scans MCP servers for hardcoded secrets, unsafe execution, and missing authentication. It helps developers and security engineers identify and remediate vulnerabilities in their MCP infrastructure.