Audit AI

Overview

Audit AI is a Model Context Protocol server that identifies authorization vulnerabilities in Next.js and Supabase applications, including live Supabase databases. It requires no API key to operate, making it straightforward to deploy and use without managing sensitive credentials.

The server runs locally on your machine via the npm package auditai-mcp, communicating over stdio with your MCP client. Installation is simple using npx -y auditai-mcp. The current release is v0.4.1, and full documentation is available at https://auditai.sh/docs/mcp.

Audit AI is listed in the Database category on mcp.site and works with any MCP client, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain Audit AI, you can claim this listing to verify your ownership, earn the Verified badge, and ensure the information stays up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "audit_ai": {
      "command": "npx",
      "args": [
        "-y",
        "auditai-mcp"
      ]
    }
  }
}