Tenant Isolation MCP Server

Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules that catch cross-tenant data leakage before it reaches production. It runs locally over stdio via the published package.

People who work with multi tenant, code scanning and owasp and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-01 · ★ 4 · #16 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

MIT · TypeScript servers · how we verify → /methodology

01 · Install Tenant Isolation

Claude Code

claude mcp add subodhkc-mcp-tenant-isolation -- npx -y mcp-tenant-isolation

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "subodhkc-mcp-tenant-isolation": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-tenant-isolation"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

repo age created 2026-08-06 - young repo, little track record yet

license MIT - declared in the repository

npm package mcp-tenant-isolation - unscoped; check the name against the project README before installing

registry namespace io.github.subodhkc is GitHub-verified and matches the repo owner

03 · What Tenant Isolation can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Limitations (from the README)

Static analysis has inherent limits. Being upfront about them: - Intra-procedural flow analysis only. The scanner traces data flow within a single function body. It does not trace flow across function calls, files, or framework middleware boundaries. Most tenant isolation defects are missing-guard-at-sink problems that do not require inter-procedural analysis, but some edge cases may be missed. - No runtime verificat

Latest releases

v2.0.0 · 2026-08-21

What changed · mcp-tenant-isolation 2.0.0 is a major version. It upgrades to the MCP v2 SDK, adds security boundary enforcement, structured scan output, evidence receipts, and npm Trusted Publishing with provenance…

v1.6.1 · 2026-08-06

Scans TypeScript and JavaScript codebases for tenant isolation vulnerabilities. 57 deterministic rules covering database query tenant filters, IDOR, cache key scoping, session isolation, file storage scoping, RLS…

04 · Who maintains Tenant Isolation

mcp-tenant-isolation is maintained by subodhkc. We track 2 MCP servers from subodhkc - 2 actively maintained, 8 combined GitHub stars, oldest repo from Aug 2026. Full record: all servers from subodhkc.

AI AppSec Evidence-backed AppSec for AI applications and agents. Powered by HAIEC. ★ 4

05 · Facts

repository: github.com/subodhkc/mcp-tenant-isolation
category: security - ranked #16 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 2 releases in the last 90 days (latest 2026-08-21)
registry: io.github.subodhkc/mcp-tenant-isolation (active, first published 2026-08-06 · 2 versions)
packages: npm:mcp-tenant-isolation

06 · Tenant Isolation FAQ

What is Tenant Isolation?

Is Tenant Isolation still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-01 and it shipped 2 releases in the last 90 days. We re-verify nightly.

How do I install Tenant Isolation?

Run `npx -y mcp-tenant-isolation`. You can also paste the ready-made client config above.

Does Tenant Isolation run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Tenant Isolation

Alternatives to Tenant Isolation

Maintained security servers if Tenant Isolation isn't the fit.

Pairs well with

Servers that cover what Tenant Isolation doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Code Inspectus · Wass MCP · Universal Connector MCP · Agent News by The Agent Times

More TypeScript MCP servers · Search Console MCP · Sudzikcoin MCP Server · SumUp MCP Server · Vulcanus · Sunub Obsidian MCP Server · see all