mcp api readiness auditor
Evaluate API safety and design secure tool contracts for Model Context Protocol (MCP) agent integrations.
$5
Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
GitHub Copilot
Gemini CLI+20 moreClaude CodeCursorCodex CLIGitHub CopilotGemini CLI
OpenClaw
Manus
Grok+17 agentsmcp api readiness auditor
Example session with this skill installed
Audit my /v1/payments API for MCP readiness. It handles transfers and user lookups. We use OAuth2 tokens but don't have idempotency keys on the transfer endpoint yet.
- Read your context and instructions
- Compiled the mcp api readiness
- Generated the document
I have audited the /v1/payments API against the MCP Safety Framework. The current implementation is
AMBER (High Risk) due to the lack of idempotency on state-changing operations and broad response schemas.
MCP Readiness Audit Report
Tool Map & Risk Classification
| Endpoint | MCP Tool Name | Classification | Risk Level | Gap |
|---|---|---|---|---|
POST /transfers | send_payment | Destructive | CRITICAL | Missing idempotency; high financial risk. |
GET /users/{id} | get_user_details | Read-only | LOW | Potential PII leakage if schema isn't filtered. |
GET /balance | check_balance | Read-only | NONE | Ready for exposure. |
Critical Gaps
| Gap | Affected Tool | Severity | Mitigation |
|---|---|---|---|
| No Idempotency | send_payment | High | Implement X-Idempotency-Key requirement in the tool contract. |
| PII Exposure | get_user_details | Medium | Narrow schema to exclude ssn and internal_flags. |
| Missing Approval | send_payment | High | Require human_approval: true in the MCP client configuration. |
Redesigned Tool Contract: send_payment
{
"name": "send_payment",
"description": "Transfer funds between accounts. Requires human confirmation.",
"inputSchema": {
"type": "object",
"properties": {
"amount": { "type": "number", "minimum": 0.01, "maximum": 5000 },
"currency": { "type": "string", "enum": ["USD", "EUR"] },
"recipient_id": { "type": "string", "pattern": "^acc_[a-z0-9]+$" },
"idempotency_key": { "type": "string", "description": "Unique UUID for this transaction" },
"dry_run": { "type": "boolean", "default": true }
},
"required": ["amount", "currency", "recipient_id", "idempotency_key"]
}
}
Validation Checklist
- Agent Usability: PASS. Tools have distinct, verb-based naming.
- Least Privilege: WARN.
get_user_detailsreturns too much metadata. - Containment: FAIL. A looping agent could trigger multiple transfers without idempotency.
Next steps
- Implement an idempotency layer on the
POST /transfersendpoint. - Update the OpenAPI spec to include a
Dry-Runheader for agent testing. - Configure your MCP host to intercept
send_paymentfor manual user approval.
mcp-api-readiness-auditor.pdf
PDF · document
Example file from a real run - the skill writes it into your workspace.
Connects securely to your tools. The creator never sees your data.
What you get
About this skill
The problem
Exposing internal APIs directly to AI agents via MCP is dangerous. Standard REST endpoints often lack the idempotency, strict validation, and human-in-the-loop controls required to prevent agents from performing destructive actions or leaking sensitive data.
What it does
- Maps existing REST/gRPC/GraphQL endpoints to intended MCP tool names and schemas.
- Classifies every tool by risk level, identifying destructive actions and potential data leakage.
- Performs a deep gap analysis on authentication delegation, idempotency, and rate limiting.
- Generates redesigned tool contracts with narrowed schemas and explicit safety boundaries.
- Produces a traffic-light readiness report with a phased rollout and kill-switch strategy.
Frameworks & tools
Model Context Protocol (MCP), OpenAPI, RAML, GraphQL, OAuth, and RESTful API standards.
Why this beats prompting it yourself
A standard prompt lacks a systematic risk classification framework. This skill uses a multi-phase audit workflow that forces checks for IDOR risks, state-change idempotency, and agent-specific failure modes that general LLMs often overlook during ad-hoc reviews.
Use cases
- Auditing a legacy CRUD API before building an MCP server for Claude or Cursor.
- Defining safety boundaries for agents that have write-access to production data.
- Designing human-in-the-loop workflows for high-value financial or admin actions.
- Hardening API schemas to reduce LLM hallucinations and token waste.
Known limitations
Requires a provided API specification or endpoint list to function. Does not perform live penetration testing or automated traffic analysis.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 17 days ago
- Passed all security checks, Safe to install