MCPHARDEN — MCP server hardening linter — capability declarations, transport, tool descriptions

MCPHARDEN — MCP server hardening linter — capability declarations, transport, tool descriptions

Part of the Cognis Neural Suite by Cognis DigitalCognis Open Collaboration License (COCL) v1.0 · domain: ai-security

MCP server hardening linter — capability declarations, transport, tool descriptions.

Install

pip install cognis-mcpharden

For local development from this repo:

pip install -e .

Quick start

mcpharden --version
mcpharden scan demos/                          # run against bundled demo
mcpharden scan demos/ --format sarif --out r.sarif --fail-on high
mcpharden mcp                                   # start as MCP server (Cognis.Studio / Claude Desktop / Cursor)

Built-in demo scenarios

Every scenario folder includes a SCENARIO.md describing what it represents and what findings to expect.

• demos/01-public-mcp-no-auth/ — see SCENARIO.md
• demos/02-internal-stdio/ — see SCENARIO.md
• demos/03-shared-multi-server/ — see SCENARIO.md

How it fits the Cognis Neural Suite

This tool is one of 52 in the Cognis Neural Suite. The full suite + launcher lives at:

• Suite landing: https://cognis.digital
• All 52 repos: https://github.com/cognis-digital
• Cognis.Studio (Enterprise AI Workforce, MCP host): https://cognis.studio

Every Suite tool ships an MCP server, so Cognis.Studio agents can call them as scoped capabilities.

License

Source-available under the Cognis Open Collaboration License (COCL) v1.0 — free for personal, internal-evaluation, research, and educational use; commercial / production use requires a license ([email protected]). See LICENSE and CONTRIBUTING.md for the collaboration-pull model.

About

Cognis Digital — Wyoming, USA · Making Tomorrow Better Today: Advanced Cybersecurity, AI Innovation, and Blockchain Expertise.