Audit the MCP servers in your setup with Claude Code
Prosy has 9 MCP servers connected to Claude Code and asked it to check the setup without changing anything. The list in .mcp.json was not complete.
Done with Claude CodeModerate
What was done
Prosy has 9 MCP servers connected to Claude Code and asked it to check the setup without changing anything. The list in .mcp.json was not complete. The answer showed 4 local and 3 remote servers, 2 forgotten ones from old projects and 3 risky ones: a GitHub token in plain text, file access to the whole home folder and a package with no pinned version, but he does not show what he fixed.
How to do it
- Paste the prompt into the tool, and replace the text in brackets with your own.
- Read the answer through. Do not send, delete or publish anything until you have seen it yourself.
- Check the original before you trust a figure, a name or a date.
Try it with Claude Code
Audit every MCP server that [tool] can load. Check [config files], the project folders and installed plugins. For each server: where it is defined, whether it is local or remote, and what it can reach in files, network and tokens. Flag plain-text secrets, file access wider than one project and packages without a pinned version. Mask every secret. Change nothing, and show me the list before I fix anything. You are done when every server has an assessment.
Replace text in brackets with your own.
Done when. Every server has an assessment.