MCPSec Audit

Version updated for https://github.com/pfrederiksen/mcpsec to version v1.2.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

MCPSec is a security scanner that audits MCP configurations, remote servers, and server source code to ensure compliance with the OWASP MCP Top 10:2025 beta. It performs static config checks, baseline drift detection, multi-client inventory, read-only enumeration, and lexical analysis of server code. The action supports OCSF JSON output and is designed to be used in CI/CD pipelines for security audits.

What’s Changed

Changelog

  • c9532aafe8a5a63fc7df5f5d9cd105ee53a696d2 feat: expand OWASP MCP security coverage
  • 916ce716ab7e87406ca9d8434144c14e70351f29 fix: satisfy release lint checks