IAC Audit Pack MCP Server

io.github.UnbearableDev/iac-audit-pack

What is the IAC Audit Pack MCP server?

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Copy-paste configuration for popular MCP clients.

transport: http

Config generated by PluginBench — verify against the source before use.

Environment / auth

Authorization
required
secret
Apify API token. Format: 'Bearer <YOUR_APIFY_TOKEN>'. Get yours at https://console.apify.com/account/integrations

~/.cursor/mcp.json

{
  "mcpServers": {
    "iac-audit-pack": {
      "url": "https://unbearable-dev--iac-audit-pack.apify.actor/mcp"
    }
  }
}

Active

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

Python

Active

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Python

Active

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Python

Active

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Python

Active

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.

Python

AGPL-3.0

Active

AI-native process classification. 2436 processes + 3284 KPIs from APQC, ITIL, SCOR.

Python

MIT