grim-mcp

Overview

grim-mcp is a Model Context Protocol server that provides security auditing capabilities for AI agents. It performs comprehensive checks across code, dependencies, exposure, secrets, drift, SBOM generation, and IoC detection. By integrating with MCP, grim-mcp becomes a set of callable tools within AI assistants, streamlining security workflows without manual data transfer between applications.

The server runs locally as an npm package, installed via npx -y grim-mcp and communicating over stdio. No authentication or external credentials are required—it works immediately after installation. The latest release is v0.6.2.

grim-mcp appears in the AI & Agents category on mcp.site and works with any MCP client including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. Maintainers are invited to claim this listing to verify ownership, earn a Verified badge, and keep information current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "grim_mcp": {
      "command": "npx",
      "args": [
        "-y",
        "grim-mcp"
      ]
    }
  }
}