
Mcp Audit
io.github.archonics由 GitHub 帳號 archonics 發布v0.1.4更新於 Oct 24, 2026
Free context-engineering audits for AI agents. BYOK Anthropic key. Top-3 findings per scan.
發布方自己的服務:audit.domains - Domain Valuation
概覽
一個本機 MCP 伺服器,用來審查 AI 代理的系統提示詞、工具定義與上下文內容,每次掃描回傳最重要的三個上下文工程問題。
- 可以做什麼
- 審查貼上的系統提示詞,檢查角色清晰度、指令衝突、優先順序結構與 token 效率,回傳三個依嚴重度排序的問題與建議。審查貼上的工具或函式定義,檢查描述品質、參數結構精確度、錯誤回應設計與可發現性。審查貼上或以結構方式描述的上下文內容,檢查重複、時效性、排序、截斷風險與提示快取運用。每次掃描針對一個面向回傳前三項發現。
- 適用情境
- 適合在開發或檢視正式環境的 AI 代理時,於發布或修改提示詞、工具結構或上下文打包之前,快速取得一份第三方意見。它是輕量的免費檢查,並非完整稽核或回歸測試套件。
- 執行需求
- 透過 npm 套件以 npx 在本機執行,需要 Node.js。需要 Anthropic API 金鑰,透過環境變數 ANTHROPIC_API_KEY 提供;稽核引擎會從使用者電腦直接呼叫 Claude。不需要帳號或 Archonics 登入。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 Mcp Audit,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
Archonics MCP Audit Server
Free-tier context engineering audits for production AI agents, delivered as MCP tools you can call from Claude Desktop, Cursor, Claude Code, or any MCP-compatible client.
What you get: top-3 findings on your system prompts, tool definitions, or context packing, on demand, no account needed.
What it costs: nothing. The free scan is genuinely free. Upgrade paths to the $49 Instant Audit and $750 Full Audit are surfaced in the response footer; they're not paywalls on this tool.
Why this exists
Most production agent failures aren't model failures — they're context engineering failures. Ambiguous instructions, underspecified tools, bloated context, no regression tests on prompt changes. Those problems are spottable by a trained reader. Archonics has trained that reader and published it as an MCP tool so you can get a second opinion on your agent's context without filing a support ticket.
The underlying audit engine applies Archonics Audit Methodology v1.0, the same spec that drives our paid audits.
Tools
audit_system_prompt
Paste a system prompt. Get back the three most important context engineering issues in it, ranked by severity, with specific recommendations.
Covers: role clarity, instruction conflicts, negative space, priority structure when instructions conflict, token efficiency, format specification precision, failure-mode coverage.
audit_tool_definition
Paste a tool/function definition. Get back the three most important issues affecting how reliably the model will call it.
Covers: description quality (the "when to use this tool" question), parameter schema precision, parameter documentation, error response design, discoverability.
audit_context_packing
Paste a representative context payload (or describe it structurally). Get back the three most important efficiency and quality issues.
Covers: content inventory, redundancy across sections, freshness/relevance, ordering, truncation risk, prompt-cache utilization.
Installation
Claude Desktop
Add to your claude_desktop_config.json:
Cursor
Add to your .cursor/mcp.json:
Claude Code
Then set ANTHROPIC_API_KEY in your environment.
Why does it need my Anthropic API key?
The audit engine runs on Claude. You bring your own API key so:
- Audit submissions go directly from your machine to Anthropic's API, never through Archonics servers.
- Your costs are transparent — a typical audit uses 2,000–4,000 tokens, well under a penny.
- There's no "free but actually limited" rate-limit surprise. Your API key, your limits.
If you'd rather not bring your own key, use the $49 Instant Audit at agent.market — we cover the API costs and return a full-methodology audit PDF.
Privacy
Submitted content is processed ephemerally. No prospect content is retained on Archonics infrastructure or used to train any model. The API call pattern is: your client → your Anthropic API key → Anthropic → your client. Archonics servers are not in this path.
Aggregated, anonymized patterns across many audits may inform improvements to the methodology — "18 of 20 audited systems lacked prompt-regression tests" — but specific content never feeds that process.
Details: archonics.ai/privacy
Upgrade paths
If the free scan surfaces issues worth fixing, two paid tiers go deeper:
- Instant Audit — $49 USDC via x402. Full methodology applied programmatically to a system you submit. 5-10 page PDF report covering all four dimensions (prompt, tools, context, eval) rather than just three findings in one dimension. Listed at agent.market/archonics.
- Full Audit — $750. Human-reviewed audit of a complete agent system. 15-25 page report tuned to your team's context. Contact [email protected].
Contact
- Questions, feedback, or false-positive reports: [email protected]
- Methodology and full audit examples: archonics.ai
- Issues with this MCP server: github.com/archonics/mcp-audit/issues
License
MIT. Use it, fork it, audit yourself.
來源:README.md,提交 25fd10c
工具
0版本歷史
1- v0.1.4最新Sep 16, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分
其他 Audit 整合
audit.domains - Domain Valuation
domains.audit官方發布者
確定性的網域名稱估值服務:提供公允價值區間、真實可比成交紀錄、可用性查詢,以及經 DNS 驗證的待售網域市場。
Revenue Agent — OpenAPI Audit & Change Detection
news.prh官方發布者
一個遠端 MCP 端點,用於稽核 OpenAPI 規格並偵測 API 變更,每次分析透過 Base 上的 x402 收取 0.10 USDC。

SEO Audit & Broken Link Checker
由 GitHub 帳號 prometheus-maker 發布
由 Apify 託管的 MCP 伺服器,用來稽核網站頁面的 SEO 中繼資料並找出失效連結與圖片,回傳每頁評分。

FinePrint AI Legal Risk & Contract Audit MCP Server
由 GitHub 帳號 RitualDev-Lab 發布
在本機記憶體中執行的合約風險掃描器,為編碼代理評估法律合約、NDA 與租約風險並產生修訂建議。

Mcp Supply Audit
由 GitHub 帳號 kimmawla 發布
把 MCP 伺服器當成供應鏈產物來稽核:登錄檔項目、PyPI/npm 套件、用戶端設定與工具定義,全為唯讀靜態檢查。