mcp-posture

Name: mcp-posture
Author: batou9150

batou9150 ★ 0

mcp-posture is a security scanner that audits remote MCP servers for authorization, transport hardening, and tool poisoning vulnerabilities by analyzing OAuth setup, TLS configuration, and tool descriptions against MCP and OAuth specifications. It produces spec-cited findings in SARIF, JSON, and Markdown formats and integrates as a Claude Code skill for semantic review and remediation guidance.

Security DevOps No API key detected prompt pack

Install

> /plugin marketplace add batou9150/mcp-posture

> /plugin install mcp-posture

Source: https://github.com/batou9150/mcp-posture

What it's made of

1 skill

Commands: 0
Agents: 0
Skills: 1
MCP servers: 0
Hooks: 0

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: none
Talks to: nothing external detected

Analyzed 2026-10-05. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (batou9150).