mcp-audit

Solid

Audit connected MCP servers for token overhead, redundancy, and security. Use when sessions feel slow or before adding new MCPs.

AI & Automation 2,653 stars 257 forks Updated today

Install

View on GitHub

Quality Score: 86/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
0
Description 5%
100

Skill Content

# MCP Audit Analyze MCP server overhead and recommend cleanup. ## Trigger Use when: - Sessions feel slow or expensive - Adding a new MCP server - Context fills up quickly - Reviewing project configuration ## Key Insight Each MCP server adds ALL its tool descriptions to every API request. A server with 20 tools adds ~2K-4K tokens per request, regardless of whether you use those tools. ## Audit Steps ### Step 1: List Active Servers Check all MCP configurations: ```bash cat .claude/settings.json 2>/dev/null | grep -A 50 "mcpServers" cat ~/.claude/settings.json 2>/dev/null | grep -A 50 "mcpServers" ``` ### Step 2: Count Tools Per Server For each server, estimate token overhead: - 1-5 tools: ~200-500 tokens (low overhead) - 6-15 tools: ~500-1500 tokens (moderate) - 16-30 tools: ~1500-3000 tokens (high) - 30+ tools: ~3000+ tokens (excessive — consider tool filtering) ### Step 3: Check Usage Questions to ask: - Which servers were actually used this session? - Which servers haven't been used in 7+ days? - Are there servers with overlapping functionality? - Are there servers only needed for specific tasks? ### Step 4: Recommend Actions **Disable** servers that: - Haven't been used in 7+ days - Overlap with another active server - Are project-specific but you're in a different project **Keep** servers that: - Are used every session (filesystem, git) - Provide unique capabilities needed for current work - Have low tool count (<5 tools) ## Output ```text MCP AUDIT Acti...

Details

Author
rohitg00
Repository
rohitg00/pro-workflow
Created
5 months ago
Last Updated
today
Language
JavaScript
License
None

Integrates with

Bundled in these plugins

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Solid

mcp-audit

Audit the configured MCP servers (user + project scope) via the Agent Monitor Config Explorer API: transport (stdio vs http), command/args and env variable names, headers, and the source file each definition came from. Reads /api/cc-config/mcp. Use when reviewing MCP integrations for hygiene, duplication, or unexpected transports.

854 Updated today
hoangsonww
AI & Automation Listed

cli-over-mcp-auditor

Use this skill proactively on the first substantial prompt of a session — silently inspect the session's own available tools/MCP servers (never ask the user to paste anything for this check) and, if any connectors look irrelevant to the task at hand, surface one compact line offering to free up context. Use this skill when the user makes explicit requests too — to audit MCP connectors, reduce context window usage, or explain why sessions run out of context fast — phrasings like "audit my MCPs for context cost", "why is my context filling up", "should I use CLI instead of MCP", "reduce my context overhead", "my sessions compact too early" — which get the full deep-audit flow instead of the one-liner. Do NOT use for debugging a broken MCP connection, for installing new connectors, for general questions about what MCP is, or for MCP spec-compatibility and migration audits (mcp-migration-auditor's job).

2 Updated yesterday
Abhillashjadhav
AI & Automation Solid

auditing-mcp-servers-for-tool-poisoning

Scan Model Context Protocol servers and tool metadata for poisoning, SSRF, and unauthenticated exposure.

46 Updated 3 days ago
adriannoes