MCP Vetted

AI-Surface

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.

Repository
apisec-inc/AI-Surface
Stars
135
Last push
2026-09-21
License
MIT
Category
Developer Tools

Score breakdown — how scoring works

  • Maintenance

    25.5 / 30
    • Pushed within 45 days16 days ago+25.5

  • Adoption

    12.4 / 25
    • GitHub stars (no package published — stars weighted fully)135+12.4

  • Documentation

    25 / 25
    • Comprehensive README (6,000+ chars)29926 chars+10
    • Install / setup instructionsyes+6
    • Tools / capabilities documentedyes+5
    • Code or client-config exampleyes+4

  • Trust signals

    9 / 20
    • OSS license declaredMIT+7
    • First-party vendor implementationno+0
    • DNS-verified registry namespaceno+0
    • Listed in official MCP Registryno+0
    • Owned by an organizationyes+2

Install

From sourcegit clone https://github.com/apisec-inc/AI-Surface

No package published to a registry — see the README for setup instructions.

Always review a server's code and required credentials before connecting it to your MCP client. MCP Vetted scores public metadata — it does not audit code for malicious behavior (yet). Methodology →

View on GitHub ↗