Welcome to MCPAudit Discussions!

[hello-args]

👋 Welcome to MCPAudit Discussions

This is the community space for MCPAudit — an offensive security testing framework for Model Context Protocol (MCP) servers.
Whether you're building MCP servers, securing AI agent integrations, or exploring red-team tooling for LLM systems, you're in the right place.

What belongs here

Use Discussions for:

• Questions — How do I scan my MCP server? What does this finding mean? How should I interpret the risk score?
• Ideas — New analyzers, attack patterns, compliance checks, CI/CD integrations, or reporting improvements
• Show and tell — Share scan results (redacted), workflows, or how you're using MCPAudit in your stack
• Community help — Best practices for MCP security, tool design, and hardening agent-facing APIs

What doesn't belong here

Please use Issues instead for:

• Bug reports — Something is broken or behaving unexpectedly
• Feature requests — Concrete enhancements you'd like maintainers to track
• Security vulnerabilities — Report privately via our security policy

Get started

Introduce yourself below! It helps to share:

• What you're working on (MCP server, agent platform, security tooling, etc.)
• What brought you to MCPAudit
• What you'd like to learn or contribute

A few ground rules

• Be respectful and constructive — we're building this community together
• Redact secrets, credentials, and sensitive data when sharing scan output or configs
• Search existing threads before opening a duplicate question
• Mark helpful answers so others can find them later
  We're glad you're here. 🔒