auditai-mcp 0.1.0

package/LICENSE

@@ -0,0 +1,17 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   Copyright 2026 Audit AI (auditai.sh)

package/README.md

@@ -0,0 +1,53 @@
+# auditai-mcp
+
+MCP server for Claude Code and Cursor from [Audit AI](https://auditai.sh). It scans a Next.js + Supabase
+app for the authorization holes AI-built apps tend to ship with (one user reading another tenant's rows,
+tables without RLS, service-role queries with no check on the caller, mass assignment) and lets your
+own coding agent confirm and fix what it finds.
+
+No API key, no account, no Docker. The scan is deterministic and runs on your machine; the reasoning
+is done by the model you already use in Claude Code or Cursor.
+
+## Install
+
+Claude Code, from your project directory:
+
+```bash
+claude mcp add auditai -- npx -y auditai-mcp
+```
+
+Cursor: Settings → MCP → Add server, command `npx`, args `["-y", "auditai-mcp"]`.
+
+Needs Node.js 22 or newer. Then ask your agent: *"Scan this project with Audit AI and check what it
+finds."*
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `audit_scan` | Deterministic scan of routes, server actions, Supabase clients and queries, RLS policies. Saves `.audit/scan.json`. |
+| `audit_get_findings` | Findings from the last scan with any recorded verdicts and proposed fixes, as JSON. |
+| `audit_get_context` | The bounded code slice, policies and instructions for one finding, for your agent to reason about (`reason`) or fix (`fix`). |
+| `audit_record_verdict` | Records your agent's verdict: `confirmed` at confidence ≥ 0.75, `suppressed` at ≥ 0.7 "not vulnerable", otherwise `unverified`. |
+| `audit_propose_fix` | Checks your agent's patch (each search string must occur exactly once, nothing outside the project), saves the diff and a regression test under `.audit/fixes/`. Writes to the project only with `apply: true`. |
+
+## Proof
+
+This package does not run a sandbox. To prove a hole and check the fix, push the repository to
+GitHub, scan it at [auditai.sh](https://auditai.sh) and press **Prove it** on the finding.
+
+## Safety
+
+- No shell tool. Every tool takes a project path and, where relevant, a finding id like `AUDIT-001`.
+- Paths must be inside the directory the server was started in, symlinks included. Set
+  `AUDITAI_MCP_ALLOW_ANY_PATH=1` to allow other directories.
+- Code from the scanned repository reaches your agent marked as untrusted data, and secret files
+  (`.env`, keys, credentials) are never put into the context.
+- Nothing is sent over the network.
+
+## Scope
+
+Next.js (App Router) + Supabase / PostgreSQL, in JavaScript and TypeScript. How precise the rules
+are, measured on repositories they had never seen: [auditai.sh/stats](https://auditai.sh/stats).
+
+Apache-2.0 · [auditai.sh](https://auditai.sh) · hello@auditai.sh