io.github.soufianetahiri/mception

Official registry Security

Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package mception
Claude Code
claude mcp add mception -e 'MCEPTION_DATA_DIR=<MCEPTION_DATA_DIR>' -e 'MCEPTION_OFFLINE=0' -e 'MCEPTION_INTROSPECT_TIMEOUT=60' -e 'MCEPTION_ENABLE_LLM_JUDGE=0' -- uvx mception==0.5.2
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "mception": {
            "command": "uvx",
            "args": [
                "mception==0.5.2"
            ],
            "env": {
                "MCEPTION_DATA_DIR": "<MCEPTION_DATA_DIR>",
                "MCEPTION_OFFLINE": "0",
                "MCEPTION_INTROSPECT_TIMEOUT": "60",
                "MCEPTION_ENABLE_LLM_JUDGE": "0"
            }
        }
    }
}

Environment variables

  • MCEPTION_DATA_DIR Where audit reports and rug-pull baselines live. Defaults to ~/.mception.
  • MCEPTION_OFFLINE Set to 1 to block outbound HTTP (OSV, registry signals, phantom-repo probes).
  • MCEPTION_INTROSPECT_TIMEOUT Per-target timeout in seconds for the fetcher + engine pipeline.
  • MCEPTION_ENABLE_LLM_JUDGE Set to 1 to enable advisory LLM-assisted classification via MCP sampling. No API key needed.

Frequently asked questions

What is io.github.soufianetahiri/mception?

Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.

How do I install io.github.soufianetahiri/mception?

It runs on your machine. In Claude Code: claude mcp add mception -e 'MCEPTION_DATA_DIR=<MCEPTION_DATA_DIR>' -e 'MCEPTION_OFFLINE=0' -e 'MCEPTION_INTROSPECT_TIMEOUT=60' -e 'MCEPTION_ENABLE_LLM_JUDGE=0' -- uvx mception==0.5.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.soufianetahiri/mception need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Who maintains io.github.soufianetahiri/mception?

It is published by soufianetahiri. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.