Meok Mcp Hardening Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.2Updated Nov 4, 2026

MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Runs automated security red-team audits of MCP servers, scoring them 0-100 against OWASP LLM Top 10 and MCP-specific risks.

What you can do
  • Audit an MCP server definition, such as a server JSON file, for security weaknesses
  • Review individual tool descriptions for risky or misleading content
  • Check a server's destructive surface, flagging tools that could change or delete data
  • Produce a scored report (0-100) mapped to OWASP LLM Top 10 (2025) and five MCP-specific risks, returned as an HMAC-signed report
When to use it
Useful before adopting or publishing an MCP server, when you want a quick structured security review of its configuration and tool descriptions rather than a manual checklist.
Requirements
Runs as a remote endpoint at api.meok.ai or as a local Python package (meok-mcp-hardening-mcp, stdio transport, e.g. via uvx or pip). No authentication, environment variables or headers are declared.
Before you install
The README advertises paid Pro ($99/mo) and Enterprise ($499/mo) tiers and links to sales and diagnostic booking, so expect commercial promotion. Audit results are vendor-generated scores and signed reports, not an independent certification; verify findings yourself before relying on them.

Installation

In SourceWeft

  1. Open Meok Mcp Hardening Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.CSOAI-ORG%2Fmeok-mcp-hardening-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "meok-hardening": {
      "type": "http",
      "url": "https://api.meok.ai/v1/dev/meok-mcp-hardening"
    }
  }
}

README

[MCP Scorecard: 83/100]

Meok MCP Hardening MCP

mcp-name: io.github.CSOAI-ORG/meok-mcp-hardening-mcp

MEOK MCP Hardening MCP

[MEOK AI Labs] [EU AI Act] [License] [PyPI]

MEOK MCP Hardening MCP — automated security red-team for any MCP server

MEOK MCP Hardening MCP — automated security red-team for any MCP server. OWASP LLM Top 10 (2025) + 5 MCP-specific risks → 0-100 score + HMAC-signed report. By MEOK AI Labs.

🚀 Quick Start

bash
# Install via pippip install meok_mcp_hardening_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install meok-mcp-hardening-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

| Tier | Price | What you get | Stripe | |---|---|---|---| | Smoke test | **£1** | Signed sample MCP-Hardening report + Article 50 PDF | | | Quick Kit | **£9** | EU AI Act Article 50 implementation guide (C2PA + EU-Icon) | | | Founder Call | **£29** | 30-min 1-on-1 with the founder | |

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Legal

Built by MEOK AI Labs — trading name of CSOAI LTD, UK Companies House 16939677. Founder: Nicholas Templeman ([email protected]). License: MIT.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "meok-mcp-hardening-mcp": {      "command": "uvx",      "args": ["meok-mcp-hardening-mcp"]    }  }}

Or: pip install meok-mcp-hardening-mcp then run the meok-mcp-hardening-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use audit_server_json to …"
  • "Use audit_tool_description to …"
  • "Use check_destructive_surface to …"

Source: README.md at commit aee45bd

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.2LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts