Search / io.github.mwstech/auditra
Auditra
not classifiedRead-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.
v1.0.2 · active · repository · website · descriptor JSON · versions
Search / io.github.mwstech/auditra
Read-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables.
v1.0.2 · active · repository · website · descriptor JSON · versions
No connection block: no_connection.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlsecret in the URL (token); URLs end up in logs, use a headertools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-13d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://{site_domain}/wp-json/auditra/v1/mcp/{token} streamable-http · templated | unknown | not probed | – | – | – | – |
No tools observed. Tools appear once a credential-free probe can list them.
Schemas: list_tools.
{
"name": "io.github.mwstech/auditra",
"title": "Auditra",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://{site_domain}/wp-json/auditra/v1/mcp/{token}",
"type": "streamable-http",
"variables": {
"token": {
"format": "string",
"isSecret": true,
"isRequired": true,
"description": "The access token generated in the site's wp-admin under Tools → Auditra. Treat it like a password: anyone holding this URL can read the site's plugin inventory. It can be revoked and regenerated from the same screen at any time."
},
"site_domain": {
"format": "string",
"isRequired": true,
"description": "The domain of the WordPress site running the Auditra plugin, without a scheme or trailing slash (for example: example.com). The site must be reachable over HTTPS.",
"placeholder": "example.com"
}
}
}
],
"version": "1.0.2",
"repository": {
"url": "https://github.com/mwstech/auditra",
"source": "github"
},
"websiteUrl": "https://www.macronimous.com/free-tools/auditra/",
"description": "Read-only MCP server for WordPress plugin audits: vulnerabilities, bloat, cron, orphaned tables."
}