Add mcp-redteam — security audit plugin for Claude Code

[m0rvayne]

mcp-redteam

Repository: https://github.com/m0rvayne/mcp-redteam
License: MIT
Install: claude plugin marketplace add m0rvayne/mcp-redteam && claude plugin install mcp-redteam

Claude Code plugin that audits MCP servers across 5 categories: Config Health, Security, Health, Architecture, Completeness.

• 3-phase architecture: Config Validation → Deep Audit (parallel agents) → Chain Analysis
• Source code path analysis + active read-only probing
• Config checks: dead servers, scope conflicts, credential exposure (CVE-2025-59536)
• Interactive HTML report with risk scores and auto-fix
• OWASP MCP Top 10 coverage
• Fully local, no external API

Category: Security / Auditing

[m0rvayne]

Update: mcp-redteam v0.2 now includes:

• Python CLI (pip install mcp-redteam) — works standalone, without Claude Code
• 30 Semgrep rules (Python + JS/TS) — shell injection taint, path traversal, SSRF, eval, secrets, stdout pollution, missing error handling
• Config scanner — dead servers, scope conflicts, credential exposure in configs, supply chain (unpinned npx/uvx), CVE-2025-59536 / CVE-2026-21852
• SARIF 2.1.0 output — GitHub Security tab integration
• CI mode — mcp-redteam scan . --no-llm --fail-on critical (deterministic, exit code 1)
• JSON output — machine-readable findings

Architecture: deterministic Semgrep engine + AI-native behavioral analysis (LLM layer for semantic mismatch, rug-pull detection, cross-server chains).

Repository: https://github.com/m0rvayne/mcp-redteam