mcp-audit-extension
Audit and log all GitHub Copilot MCP tool calls in VSCode with ease.
Install / Use
claude mcp add borisdan -- npx -y github:borisdan/mcp-audit-extensionIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
Development & EngineeringSupported Platforms
Our assessment of mcp-audit-extension
mcp-audit-extension scores 46/100 on our quality scale, 4305th of 4,611 Development & Engineering skills we index.
Its MCP Server is 9.2 KB long, written without headings and no code examples: a thorough specification that gives an agent plenty to work with.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-10-19 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
mcp-audit-extension compared with similar skills
All 4 of these similar skills score higher than mcp-audit-extension; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| mcp-audit-extension (this skill)by borisdan | 46 | 0 | — | MCP Server |
| taste-skillby Leonxlnx | 100 | 110.6k | 1d ago | CLAUDE.md |
| Agent-Reachby Panniantong | 100 | 109.2k | today | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 78.9k | today | CLAUDE.md |
| ai-job-searchby ai-job-search-dev | 100 | 69.8k | today | CLAUDE.md |
Frequently asked questions
- How do I install mcp-audit-extension?
- Run
claude mcp add borisdan -- npx -y github:borisdan/mcp-audit-extension. The install tabs above show the steps for each supported agent. - Which AI agents does mcp-audit-extension work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is mcp-audit-extension safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is mcp-audit-extension still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHub{ "name": "mcp-audit-extension", "displayName": "MCP Audit", "description": "Audit and log all GitHub Copilot MCP tool calls in VSCode with ease.", "publisher": "Agentity", "version": "1.1.9", "preview": false, "icon": "logo.png", "license": "SEE LICENSE IN LICENSE", "keywords": [ "mcp", "audit", "security", "visibility", "copilot" ], "qna": "https://github.com/Agentity-com/mcp-audit-extension?tab=readme-ov-file#faq", "repository": { "type": "git", "url": "https://github.com/Agentity-com/mcp-audit-extension.git" }, "engines": { "vscode": "^1.101.0" }, "activationEvents": [ "onStartupFinished" ], "contributes": { "mcpServerDefinitionProviders": [ { "id": "mcpAuditProvider", "label": "MCP Audit Provider" } ], "configuration": { "title": "MCP Audit", "type": "object", "properties": { "mcpAudit.forwarders": { "type": "array", "description": "Configuration for one or more log forwarders.", "default": [], "items": { "type": "object", "required": [ "name", "type", "enabled" ], "properties": { "name": { "type": "string", "description": "A unique, user-friendly name for this forwarder." }, "enabled": { "type": "boolean", "description": "Enable or disable this specific forwarder.", "default": true }, "type": { "type": "string", "description": "The type of the forwarder.", "enum": [ "HEC", "CEF", "FILE" ] } }, "oneOf": [ { "properties": { "type": { "const": "HEC" }, "url": { "type": "string", "description": "The full URL of the Splunk HEC endpoint.", "format": "uri" }, "tokenSecretKey": { "type": "string", "description": "The key to look up the HEC token from the secret store." }, "sourcetype": { "type": "string", "description": "(Optional) The sourcetype for the events." }, "index": { "type": "string", "description": "(Optional) The Splunk index to send data to." } }, "required": [ "url", "tokenSecretKey" ] }, { "properties": { "type": { "const": "CEF" }, "host": { "type": "string", "description": "The IP address or hostname of the Syslog server." }, "port": { "type": "integer", "description": "The port number of the Syslog server." }, "protocol": { "type": "string", "enum": [ "tcp", "udp", "tls" ], "description": "The transport protocol to use." } }, "required": [ "host", "port", "protocol" ] }, { "properties": { "type": { "const": "FILE" }, "path": { "type": "string", "description": "The full path to the local log file." }, "maxSize": { "type": "string", "description": "Optional. The maximum size of the file before it is rotated. Use a number followed by 'B', 'K', 'M', or 'G' (e.g., '10M', '1G').", "pattern": "^\d+[BKMG]$", "deafult": "10M" } }, "required": [ "path" ] } ] } } } }, "viewsContainers": { "activitybar": [ { "id": "mcpToolCallLogContainer", "title": "MCP Tool Call Logs", "icon": "mcp-icon-view.png" } ] }, "views": { "mcpToolCallLogContainer": [ { "id": "mcpToolCallLogView", "name": "Tool Call History", "type": "tree", "icon": "mcp-icon-view.png" } ] } }, "main": "./dist/extension.js", "scripts": { "clean": "rimraf out dist", "compile": "npm run check-types && node esbuild.js", "check-types": "tsc --noEmit", "watch": "npm-run-all -p watch:", "watch:esbuild": "node esbuild.js --watch", "watch:tsc": "tsc --noEmit --watch --project tsconfig.json", "vscode:prepublish": "npm run clean && npm run package", "package": "npm run check-types && node esbuild.js --production", "compile-tests": "tsc -p . --outDir out", "copy:resources": "copyfiles -u 1 "src/.txt" "src/.json" out", "pretest": "npm run clean && npm run compile-tests && npm run copy:resources", "test": "mocha --require ts-node/register --timeout 15000 --colors src/test/**/.test.ts" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.16.0", "@vscode/extension-telemetry": "^1.0.0", "dotenv": "^16.0.0", "express": "^5.1.0", "fs.promises.exists": "^1.1.4", "http-proxy-middleware": "^3.0.5", "mcp-proxy": "^5.4.0", "rotating-file-stream": "^3.2.6", "sql.js": "^1.13.0", "syslog-pro": "^1.0.0", "winston": "^3.17.0", "yargs": "^17.0.0" }, "devDependencies": { "@types/chai": "^4.3.16", "@types/chai-as-promised": "^8.0.2", "@types/chai-subset": "^1.3.6", "@types/express": "^5.0.3", "@types/mocha": "^10.0.10", "@types/mock-fs": "^4.13.4", "@types/node": "^18.0.0", "@types/sql.js": "^1.4.9", "@types/syslog-pro": "^1.0.3", "@types/tmp": "^0.2.6", "@types/vscode": "^1.85.0", "@types/yargs": "^17.0.0", "@vscode/vsce": "^3.6.0", "chai": "^5.1.1", "chai-as-promised": "^8.0.1", "chai-subset": "^1.6.0", "copyfiles": "^2.4.1", "esbuild": "^0.25.8", "esbuild-plugin-copy": "^2.1.1", "fastmcp": "^3.9.0", "mocha": "^10.8.2", "mock-fs": "^5.5.0", "npm-run-all": "^4.1.5", "rimraf": "^6.0.1", "selfsigned": "^2.4.1", "tmp": "^0.2.3", "ts-node": "^10.9.2", "typescript": "^5.3.3" } }
Related Skills
taste-skill
110.6kAgent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
Agent-Reach
109.2kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
78.9kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
ai-job-search
69.8kThe job search that runs on your machine. AI job application framework built on Claude Code: evaluate postings, tailor CVs, write cover letters, prep interviews. Fork it and own it.
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.
