io.github.soufianetahiri/mception
Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
mceptionclaude mcp add mception -e 'MCEPTION_DATA_DIR=<MCEPTION_DATA_DIR>' -e 'MCEPTION_OFFLINE=0' -e 'MCEPTION_INTROSPECT_TIMEOUT=60' -e 'MCEPTION_ENABLE_LLM_JUDGE=0' -- uvx mception==0.5.2
{
"mcpServers": {
"mception": {
"command": "uvx",
"args": [
"mception==0.5.2"
],
"env": {
"MCEPTION_DATA_DIR": "<MCEPTION_DATA_DIR>",
"MCEPTION_OFFLINE": "0",
"MCEPTION_INTROSPECT_TIMEOUT": "60",
"MCEPTION_ENABLE_LLM_JUDGE": "0"
}
}
}
}
Environment variables
MCEPTION_DATA_DIRWhere audit reports and rug-pull baselines live. Defaults to ~/.mception.MCEPTION_OFFLINESet to 1 to block outbound HTTP (OSV, registry signals, phantom-repo probes).MCEPTION_INTROSPECT_TIMEOUTPer-target timeout in seconds for the fetcher + engine pipeline.MCEPTION_ENABLE_LLM_JUDGESet to 1 to enable advisory LLM-assisted classification via MCP sampling. No API key needed.
Frequently asked questions
What is io.github.soufianetahiri/mception?
Audits other MCP servers for security risks. Returns safe / caution / unsafe / inconclusive.
How do I install io.github.soufianetahiri/mception?
It runs on your machine. In Claude Code: claude mcp add mception -e 'MCEPTION_DATA_DIR=<MCEPTION_DATA_DIR>' -e 'MCEPTION_OFFLINE=0' -e 'MCEPTION_INTROSPECT_TIMEOUT=60' -e 'MCEPTION_ENABLE_LLM_JUDGE=0' -- uvx mception==0.5.2. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.soufianetahiri/mception need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Who maintains io.github.soufianetahiri/mception?
It is published by soufianetahiri. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.