What is the key difference between MCP Security Audit and Pkgxray?

MCP Security Audit belongs to the Security category with local stdio execution, while Pkgxray belongs to the Security category with local stdio execution.

How do I install MCP Security Audit or Pkgxray in Claude Desktop or Cursor?

Copy the mcpServers JSON configuration snippet provided on this page into your claude_desktop_config.json or ~/.cursor/mcp.json file and restart your AI client.

Are MCP Security Audit and Pkgxray free or paid?

MCP Security Audit operates under a Free / Open Source model (No auth required). Pkgxray operates under a Free / Open Source model (No auth required).

Which MCP server has more tools and community activity?

MCP Security Audit lists 6 tools with 4 views and 57 GitHub stars. Pkgxray lists 6 tools with 4 views and 11 GitHub stars.

Can I use both MCP Security Audit and Pkgxray together in the same MCP host?

Yes! MCP hosts like Claude Desktop, Cursor, Windsurf, Cline, and VS Code support configuring multiple servers under the mcpServers object simultaneously.

Side-by-Side Model Context Protocol Comparison

MCP Security Audit vs Pkgxray

In-depth architectural comparison of the MCP Security Audit and Pkgxray MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

At a Glance & Executive Verdict

MCP Security Audit

Security · Local stdio

Quality: 56/100 (Good) | Auth: No auth required

Pkgxray

Security · Local stdio

Quality: 47/100 (Fair) | Auth: No auth required

Verdict Summary: Choose MCP Security Audit if you need specialized Security tools running via a local process. Choose Pkgxray if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.

Which MCP Server Should You Choose?

Choose MCP Security Audit when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: Remote npm registry security checks, Critical-to-low severity reporting, CVE, CVSS, CWE, and advisory references.

Explore MCP Security Audit Details

Choose Pkgxray when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: Static quarantined package analysis, SAFE, REVIEW, and BLOCK verdicts, Cited file-level evidence.

Explore Pkgxray Details

Feature & Specification Comparison

Specification	MCP Security Audit qianniuspace Security	Pkgxray Security
Summary	A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.	Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
Category & Scope	Security

Tools & Capabilities Breakdown

MCP Security Audit Tools (6)

Remote npm registry security checks

Critical-to-low severity reporting

CVE, CVSS, CWE, and advisory references

Automatic fix recommendations

npm, pnpm, and yarn support

Structured clean-audit responses

Pkgxray Tools (6)

Static quarantined package analysis

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

MCP Security Audit Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "qianniuspace-mcp-security-audit": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli"
      ]
    }
  }
}

Pkgxray Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "pkgxray": {
      "command": "npx",
      "args": [
        "-y",
        "--yes"
      ]
    }
  }
}

Frequently Asked Questions

MCP Security Audit is categorized under Security and uses a local stdio subprocess. In contrast, Pkgxray belongs to Security using local stdio subprocess. Select MCP Security Audit when you need capabilities focused on security and Pkgxray when you require tools for security.

More alternatives to MCP Security Audit More alternatives to Pkgxray Security category hub Canonical compare URL