MCP Config Lint - mcp.json and claude_desktop_config security audit
Verified publisherWhat a VS Code verified publisher badge means, compared with Open VSX →
Audits mcp.json for the mistakes AI-written agent configs carry: inline API keys, unpinned npx launches, plaintext remote servers, shell wrappers, auto-approved tools and filesystem roots.
Tracked since 16 Sept 2026
Daily readings on both stores, taken by us. As of 25 Sept 2026.
Each bar is one day’s change in the store’s own counter. Open VSX counts a download on every update, so a day includes updates by people who already had it.
Where MCP Config Lint - mcp.json and claude_desktop_config security audit ranks in search
Positions observed daily on both stores. Neither store publishes this, and the two run separate search engines over separate catalogues.
| Search | Marketplace | Open VSX |
|---|---|---|
| claude | #730of 3,522 | #807of 1,351↑169 7d |
| cursor | #742of 2,461 | — |
16 more searches, day-by-day history, and the extensions ranked above it. See plans | ||
VS Code Marketplace search ranking: measuring jitter and real movement →
- Installs
- 2
- Rating
- —unrated
- Rank in Linters
- >1,000of 5,519
- Latest
- v1.0.624 Sept 2026
13 releases · first published Sept 2026
Why the Open VSX download count looks inflated →
- Downloads
- 1,176+82.8% 7d
- Rating
- —from 0 reviews
- Rank in Linters
- >1,000of 1,781
- Latest
- v1.0.624 Sept 2026
Downloads count every update, not unique installs.
What the publisher says
MCP Config Lint - mcp.json and claude_desktop_config security audit’s own readme, changelog and license, as published to the VS Code Marketplace.