io.github.soufianetahiri/mception

Official

Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.

Audit MCP servers for security vulnerabilities and rate risk levels.

Install

Configuration

Environment variables

MCEPTION_DATA_DIR

Where audit reports and rug-pull baselines live. Defaults to ~/.mception.

MCEPTION_OFFLINEdefault 0

Set to 1 to block outbound HTTP (OSV, registry signals, phantom-repo probes).

MCEPTION_INTROSPECT_TIMEOUTdefault 60

Per-target timeout in seconds for the fetcher + engine pipeline.

MCEPTION_ENABLE_LLM_JUDGEdefault 0

Set to 1 to enable advisory LLM-assisted classification via MCP sampling. No API key needed.

claude_desktop_config.json

{
  "mcpServers": {
    "mception": {
      "command": "uvx",
      "args": [
        "mception"
      ],
      "env": {
        "MCEPTION_DATA_DIR": "<YOUR_MCEPTION_DATA_DIR>",
        "MCEPTION_OFFLINE": "0",
        "MCEPTION_INTROSPECT_TIMEOUT": "60",
        "MCEPTION_ENABLE_LLM_JUDGE": "0"
      }
    }
  }
}