mcp-audit
mcp-audit / servers / @azure/mcp

Is @azure/mcp safe?

1 known CVE   The mcp-audit verdict for @azure/mcp (npm), rendered from the same JSON the API serves.

Registry facts

MaintainerMicrosoft
Verified publisherno
Entry last verified2026-05-02
Hash pins availableno
Repositoryhttps://github.com/Azure/azure-mcp

Known vulnerabilities

CVECVSSSummaryFixed in
CVE-2026-26118——no fix published

Source: National Vulnerability Database (NVD).

What it can do

Capability tags come from mcp-audit's curated registry and drive its cross-server toxic-flow analysis.

Check your own machine

This page describes the public package. What matters is your deployment — run the full check locally:

pip install mcp-audit-scanner
mcp-audit check

Badge for your README

mcp-audit verdict badge

![mcp-audit](https://img.shields.io/endpoint?url=https://mcp-audit.dev/v1/badge/npm/at-azure-mcp.json)