# Assay MCP server

> Verifies the liveness, schema integrity, and security of MCP and A2A endpoints to prevent tool poisoning and silent schema changes.

- Repository: https://github.com/robertoyanguas-ops/assay
- Page: https://hostedmcp.org/servers/robertoyanguas-ops/github-audit
- Transport: remote
- Stars: 0
- License: MIT
- Latest version: 7.0.17

## Install

### Claude Code

```sh
claude mcp add --transport http github-audit https://github-audit.agentdiet.dev/mcp
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "github-audit": {
      "url": "https://github-audit.agentdiet.dev/mcp"
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "github-audit": {
      "type": "http",
      "url": "https://github-audit.agentdiet.dev/mcp"
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"github-audit","type":"http","url":"https://github-audit.agentdiet.dev/mcp"}'
```

### Codex

```sh
codex mcp add github-audit --url https://github-audit.agentdiet.dev/mcp
```

### Codex config.toml (`~/.codex/config.toml`)

```toml
[mcp_servers.github-audit]
url = "https://github-audit.agentdiet.dev/mcp"
```

### Gemini CLI

```sh
gemini mcp add -s user --transport http github-audit https://github-audit.agentdiet.dev/mcp
```

### Gemini settings.json (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "github-audit": {
      "url": "https://github-audit.agentdiet.dev/mcp",
      "type": "http"
    }
  }
}
```

## FAQ

### What does Assay monitor?

Assay continuously probes remote MCP, A2A, and x402 endpoints to verify liveness and schema integrity.

### How does Assay prevent tool poisoning?

It scans for prompt-injection tool poisoning before an agent executes or pays for a tool.