Agent authority is hard to see
MCP servers can connect agents to code, databases, SaaS tools, files, cloud actions, and customer data. Teams need a readable inventory of what can execute, retrieve, mutate, or expose data.
MCP security audit
A fixed-scope MCP audit before agents touch real systems.
MCP Signoff helps teams review MCP servers, exposed tools, auth signals, token handling, prompt-injection risk, tool poisoning risk, and production-readiness evidence before customer pilots or internal rollout.
Why teams buy this review
Free scanners need triage
Open-source scanners help find signals. The paid audit adds manual context, business impact, remediation priority, and a buyer-safe report your team can share.
Security reviewers need proof
AppSec, AI governance, and customer security teams need evidence around approvals, permissions, secrets, tool descriptions, logging, and safe intake boundaries.
What the audit covers
| Area | What gets reviewed | Buyer outcome |
|---|---|---|
| Inventory | MCP servers, exposed tools, clients, configs, and environment scope. | Know what exists and what is in scope. |
| Permissions | Read, write, delete, send, deploy, payment, file, database, and network capabilities. | Know which tools carry operational risk. |
| Auth and tokens | Authentication hints, token handling, environment variables, OAuth scopes, and approval boundaries. | Reduce credential and scope exposure. |
| Tool poisoning | Tool names, descriptions, prompt-facing copy, shadow tools, and metadata that could steer agent behavior. | Find risky tool semantics before rollout. |
| Input and output | SSRF, command injection, path traversal, SQL injection, sensitive data, excessive data, and error disclosure patterns. | Prioritize fixes that affect real exposure. |
| Governance | Allowlist fit, registry fit, gateway readiness, audit evidence, remediation backlog, and rescan terms. | Create a decision packet for launch or review. |
Deliverables
Audit report
- Executive summary.
- MCP server and tool inventory.
- Risk-ranked findings with evidence.
- Business impact and remediation guidance.
- Buyer-safe summary for internal or customer review.
Remediation path
- Prioritized fix list.
- Owner suggestions.
- Out-of-scope notes.
- Findings call for qualifying packages.
- One re-scan for qualifying packages.
Fixed-scope packages
Agency Handoff Pack
For agencies and consultancies handing an MCP server or agent workflow to a client.
$1,500fixed price
- One MCP server or agent workflow
- Client-ready evidence packet
- Permission and approval map
- 5 business days after complete intake
Security Review Readiness Pack
For software companies whose MCP server is facing an enterprise customer security review.
$2,500fixed price
- Evidence packet mapped to OWASP MCP Top 10 and AIUC-1 MCP controls
- Answers to the MCP questions reviewers ask
- Shareable signoff letter
- 1 retest after fixes, 5 business days
Readiness Pack + Manual Testing
For vendors with a named enterprise deal waiting on the security review.
$5,000fixed price
- Everything in the Readiness Pack
- Manual testing of the auth flow and tool injection paths
- Findings call with your engineers
- 7 to 10 business days
Scope boundaries
Good fit
- AI agent teams connecting tools to real systems.
- Devtool teams shipping public MCP servers.
- AppSec teams approving MCP use.
- B2B SaaS teams preparing customer security review.
Not a fit
- Requests for formal compliance certification.
- Broad penetration testing outside the MCP scope.
- Unowned systems or materials without authorization.
- Secret sharing through public issues or public email.