AAikido MCP (official)

Tested npm @aikidosec/mcp 1.0.34 (AGPL; published by the aikidosec npm scope; no public GitHub repository in package metadata). Initialize and tools/list over stdio succeeded with no credentials and listed 13 tools (scan paths/full scan, OSS dependency scan, issues list, login, ignore/snooze/severity, workspaces, deep review). Real calls need an Aikido account: aikido_login, aikido_workspaces_list and aikido_issues_list all returned isError with a missing-keychain / set AIKIDO_API_KEY message pointing at Settings → Integrations → AI Code Generators → Aikido MCP Server (live endpoint probe, Nov 7, 2026). We did not set AIKIDO_API_KEY or open a browser sign-in. Vendor docs at help.aikido.dev/ai-and-dev-tools/aikido-mcp link the exact npm package. Score capped: no passing tool call.

Transport (tested 2026-11-07): stdio

Tested version: 1.0.34 · tested 2026-11-07

Score 70/100 · Tools 13 · Token cost approx. 4,576 tokens · Compare · Last tested 2026-11-07 · Version tested 1.0.34 · Package @aikidosec/mcp

Summary: Aikido MCP (official) completed an MCP handshake without credentials and exposed 13 tools.

Evidence summary

Handshake

pass

Tools listed

13

Context cost

approx. 4576 tokens, cl100k estimate (13 tools, measured 2026-11-11, version 1.0.34; an estimate) ranking · add up your servers' context cost

API key

Connects without a key; tool calls need one

Tested

2026-11-07

Test results

Local-model readiness

Token cost (estimate): approx. 4576 tokens, cl100k estimate for 13 tools · about 56% of an 8k context. This is an estimate from our testing (counted with cl100k_base).

Small-model friendly (schema heuristic, not a model result): unknown.

What we tested and what we didn't

Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.

{
  "name": "@aikidosec/mcp",
  "version": "1.0.34",
  "registry": "npm",
  "status": "working",
  "tested": "2026-11-07",
  "tools_count": 13,
  "deprecated": false,
  "archived": null,
  "tests": {
    "install": [
      "pass",
      20,
      "`npm install @aikidosec/mcp` (Node 20, Linux) succeeded in 2s."
    ],
    "handshake": [
      "pass",
      30,
      "MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 13 tools listed in 1.9s."
    ],
    "maintenance": [
      "pass",
      25,
      "Latest release published 1 days before test."
    ],
    "docs": [
      "partial",
      10,
      "install instructions present; `mcpServers` config example present. Check of the package's own README (README shipped in npm package)."
    ],
    "license": [
      "partial",
      3,
      "License not machine-detected as OSI (AGPL)."
    ]
  }
}

Install

npx -y @aikidosec/mcpCopy

Pin the version we tested

npx -y @aikidosec/mcp@1.0.34Copy

tested 2026-11-07. Newer versions may differ and were not tested by us.

{
  "mcpServers": {
    "aikido-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@aikidosec/mcp@1.0.34"
      ]
    }
  }
}

Tools listed

aikido_adjust_issue_severity, aikido_deep_review, aikido_deep_review_status, aikido_full_scan, aikido_ignore_issue, aikido_issues_list, aikido_login, aikido_oss_dependency_scan, aikido_scan_paths, aikido_snooze_issue, aikido_unignore_issue, aikido_unsnooze_issue, aikido_workspaces_list

Tool history: captured Nov 11, 2026. All tool history.

Quick config

{
  "mcpServers": {
    "aikido-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@aikidosec/mcp"
      ]
    }
  }
}

Add to config Opens the config generator with this server selected.

{
  "mcpServers": {
    "aikido-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@aikidosec/mcp"
      ]
    }
  }
}

FAQ

Is Aikido MCP deprecated?

No. @aikidosec/mcp was not deprecated or archived when we last tested it on 2026-11-07.

What replaces Aikido MCP?

Nothing; Aikido MCP (official) is not deprecated as of 2026-11-07.

Does Aikido MCP need an API key?

It connects and lists 13 tools without a key, but its tool calls need one.

Embed the badge

Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.

Copy HTML

Copy Markdown Claim this listing · Report an issue