mcpvet is an open-source CLI tool that combines testing, linting, and contract validation for MCP servers. Below are 39 developer tools apps with similar functionality to mcpvet, matched by what each product actually does — not ranked or scored. Explore each to find the closest fit for your use case.
bash-vet-mcp is an open-source CLI tool and MCP server that analyzes and vets shell commands generated by LLMs before execution. It detects potentially destructive patterns and enforces security rules, helping developers and AI agent operators run automation safely.
mcp-mcts is an open-source CLI tool for local MCP security scanning, attack chain analysis, inventory management, and CI integration. It supports optional Semgrep and LLM analysis, making it suitable for security engineers and DevOps teams focused on codebase security.
mcptest is an open-source CLI tool designed for automated testing of Model Context Protocol (MCP) servers in CI environments. It provides compliance scoring, security scanning, and schema drift detection, streamlining MCP server validation for developers and DevOps teams.
mcp-strike is an open-source command-line tool designed for active, runtime adversarial testing of Model Context Protocol (MCP) servers. It helps security engineers and red teams identify vulnerabilities and weaknesses by simulating attacks and scanning for issues. The tool supports automated security assessments and is freely available under the MIT license.
mcp-checkup is an open-source CLI utility that audits MCP server setups, measuring context tax and hygiene. It helps AI infrastructure engineers and developers ensure their Model Context Protocol servers are efficient and healthy by providing detailed health checks and token analysis.
mcp-tool-auditor is an open-source command-line tool designed for security researchers to scan and pentest MCP servers. It provides both defensive scanning and offensive pentesting capabilities, mapping to the OWASP MCP Top 10. The tool helps identify and mitigate security vulnerabilities in AI and LLM-related infrastructures.
Security scanner for MCP (Model Context Protocol) servers - pentest your AI agent's tool connections
Static analysis tool for MCP server Python code — detects security vulnerabilities via AST and taint tracking.
Linter for MCP (Model Context Protocol) config files used by Claude Desktop, Cursor, Cline, Windsurf, and Zed. CLI + library API.
mcp-audits is an open-source CLI tool that scans, enumerates, and risk-scores permissions on locally configured MCP servers. It is designed for security engineers and AI infrastructure operators to ensure safe and compliant access control in AI systems.
Simple MCP Client to quickly test and explore MCP servers from the command line
mcpscore is an open-source CLI tool that analyzes MCP servers for compliance, quality, and protocol validation. It generates comprehensive reports to help developers and administrators ensure their Model Context Protocol servers meet required standards.
pcp-mcp is an open-source MCP server designed for use with Performance Co-Pilot (PCP). It facilitates advanced monitoring and integration using the Model Context Protocol, making it suitable for system administrators and developers managing performance data.
mcp-toolguard is a tool designed to monitor contracts, detect drift, and perform security checks for MCP servers in both continuous integration (CI) environments and production. It addresses the problem of silent breaking changes in MCP server contracts that can disrupt agent operations without triggering build failures or type-checking errors. By capturing a canonical snapshot of a server's tools, schemas, and capabilities, mcp-toolguard enables versioned contract management directly within a repository, using a deterministic hash to ensure consistency. The tool employs a single engine that operates across three layers: contract validation, drift detection, and security analysis. json file, which is committed and versioned with the codebase. Drift detection classifies every change as breaking, compatible, or suspicious, using semantic diffing rather than simple text comparison. This process highlights removals and type changes as breaking, additions as compatible, and changes to descriptive text as suspicious, identifying potential prompt-injection surfaces. Security checks are enforced through 15 rules targeting threats such as tool poisoning, credential-shaped parameters, cross-tool coercion, and hidden characters, with each finding accompanied by supporting evidence. mcp-toolguard integrates with CI pipelines through a GitHub Action and can be run via the command line interface. It supports scheduled checks and alerts in production, including notifications through Slack or webhooks. The tool validates server contracts against both the current and upcoming MCP specification versions, providing independent reports for each to anticipate future breaking changes. The baseline is the accepted state, and only new findings block CI or trigger production alerts. The platform offers a free tier that operates entirely offline, requiring no signup and minimal setup. mcp-toolguard is open source and distributed under the MIT license, with installation available via pip. It is suitable for teams managing MCP servers who need to ensure contract stability, detect unauthorized changes, and enforce security policies throughout the software lifecycle.
veil-mcp is an open-source CLI firewall for Model Context Protocol (MCP) tool calls, descriptors, and results. It helps AI infrastructure engineers secure and filter agent workflows using MCP integrations.
mcpipe is an open-source, plugin-based MCP server framework that allows developers to route any CLI tool through customizable Source → Executor → Sink pipelines. It supports the Model Context Protocol and is designed for extensibility and integration with other tools.
CI gate for MCP servers
Test your MCP server like you test an API — declarative YAML, CI-ready, zero boilerplate.
vulcai-mcp-forge-cli is an open-source command-line tool that enables developers to instantly generate MCP servers from OpenAPI specs, GraphQL schemas, codebases, CLIs, or websites. It streamlines the process of building MCP-compatible endpoints for integration and automation.
mcp-risk-linter is an open-source CLI tool that analyzes MCP server tools for readiness and security risks, including authentication, filesystem, shell, and network vulnerabilities. It helps developers and DevOps teams ensure safer deployments.
mcp-llm-eval is an open-source CLI tool and MCP server that packages LLM evaluation gates as reusable primitives for CI/CD workflows. It enables developers and ML engineers to automate and standardize the evaluation of large language models within their development pipelines. The tool supports benchmarking and integration with MCP for scalable model assessment.
openclaw-output-vetter-mcp is an open-source MCP server for verifying AI agent outputs, providing inline grounding checks, exception scanning, and transcript review. It is designed for developers and researchers working with AI agents who need robust evaluation and observability tools.
MCP Pre-Flight is a web-based submission auditing tool designed for developers preparing Model Context Protocol (MCP) servers for listing in the Claude and OpenAI directories. The platform addresses the challenge of ensuring that MCP server implementations meet directory requirements before undergoing formal review, aiming to catch common mismatches and issues that can lead to rejection. The tool performs a multi-layered audit process. At the wire level, it checks OAuth 2.1 with PKCE, dynamic client registration, authorization, token exchange, refresh flows, and MCP protocol endpoints such as initialize, tools/list, and tools/call. It also tests for resilience to malformed bodies and unknown methods. Each safe-to-invoke tool exposed by the MCP server is actually called with synthesized arguments to verify correct invocation. For tools that claim idempotency, the platform runs an idempotency probe by calling them twice and comparing the results. MCP Pre-Flight offers optional source-side analysis by accepting a GitHub repository URL. It uses the GitHub API to fetch the repository and runs an abstract syntax tree (AST) check, ensuring that handler implementations match their annotations. The tool also verifies that the README file mentions every tool declared in the source code. Additionally, it analyzes the language of responses for vocabulary that may contradict the tool's annotations. Each audit finding is tagged with the relevant directory—Claude or OpenAI—that the issue pertains to. The tool requires the HTTPS endpoint of a deployed MCP server, specifically one that responds to JSON-RPC tools/list. If OAuth is present, MCP Pre-Flight tests the full authentication flow. Authenticated checks can be unlocked by providing a test bearer token. For source analysis, public repositories can be used without authentication, while private repositories require a personal access token. MCP Pre-Flight is delivered as a free web tool. By simulating the directory review process and highlighting issues in advance, MCP Pre-Flight helps developers reduce the risk of delayed or rejected submissions when targeting the Claude and OpenAI directories.
MCPM is an open-source command-line tool designed to manage Model Context Protocol (MCP) servers. It offers a range of features for discovering, installing, organizing, and sharing MCP servers, with a focus on global configuration and profile-based management. The tool enables users to search for MCP servers from a curated registry, install servers globally for use across environments, and organize servers into profiles to support different workflows. MCPM also provides seamless integration with MCP clients, allowing users to configure and connect servers to various client applications. Direct execution of servers for testing and debugging is supported through the command line, and the tool includes functionality for sharing servers securely using remote access tunnels. MCPM works with any MCP client by configuring servers to use its run command, and it specifically mentions compatibility with several AI assistants and coding agents, including Claude Desktop, Cursor, Windsurf, VSCode, Continue, Cline, Roo Code, OpenCode, Goose CLI, 5ire, Gemini CLI, Codex CLI, Qwen CLI, and Trae. Per-server enable and disable options are available for certain clients. The tool is delivered as a CLI application and can be installed using various methods, such as a shell script, Homebrew, pipx, or pip. MCPM is community-driven, open source, and distributed under the MIT License, with a commitment to being free to use. It is intended for developers and others who need to manage MCP servers efficiently across different clients and workflows.
AI-powered security vulnerability scanner for MCP (Model Context Protocol) servers with automatic fixes, secret detection, and multi-channel alerts
covenant-mcp is an open-source CLI tool that lints contracts for MCP (Model Context Protocol) servers, helping developers catch breaking schema changes before deployment. It is designed for teams building agent infrastructure and tools using MCP.
Turn any MCP server or OpenAPI spec into a CLI
mcpolish is a command-line static linter for Model Context Protocol (MCP) servers. It helps developers catch vague, colliding, or misleading tool descriptions before AI agents interact with them, improving reliability and clarity in agentic workflows.
mcp-check-security is an open-source command-line tool that performs offline security checks on Model Context Protocol (MCP) server configurations. It helps developers and security engineers identify potential vulnerabilities and misconfigurations before deployment. The tool is designed for use in AI infrastructure environments.
plesk-mcp is an open-source MCP server that facilitates automation and orchestration of model context protocol workflows, particularly for hosting and AI infrastructure scenarios. It is designed for engineers integrating AI models into hosting platforms.
mcp-builder-toolkit is an open-source CLI utility that generates Python MCP server projects based on manifest files. It streamlines the process of creating readable and tested server code, making it easier for developers to scaffold and maintain MCP-compliant services.
postman-mcp is an open-source MCP server that generates and updates Postman requests directly from your API code, providing diffs before every write. It is designed for API developers who want to automate and streamline their API testing workflows.
mcp-config-audit is an open-source command-line tool that scans Model Context Protocol (MCP) configuration files for security issues. It operates locally, requiring no account or network connection, and outputs results in SARIF format. Designed for developers and security engineers who need to audit MCP configs securely and efficiently.
The package manager for MCP servers — install and configure in one command.
tappy-mcp is an open-source command-line tool for discovering, configuring, running, inspecting, and monitoring Model Context Protocol (MCP) servers across AI clients. It provides infrastructure engineers and developers with essential tools to manage and monitor MCP-based AI deployments efficiently.
Environment configuration manager for MCP projects
mcp-security-scan is an open-source CLI tool that scans MCP servers for hardcoded secrets, unsafe execution, and missing authentication. It helps developers and security engineers identify and remediate vulnerabilities in their MCP infrastructure.
Convert MCP server tools into hierarchical CLI commands and agent Skills
openclaw-skill-vetter-mcp is an open-source MCP server that scans and security-vets third-party AI agent extensions, providing risk scores and static analysis to help developers and security teams prevent vulnerabilities.
