Is ai.sekura/sekura safe to use?

ai.sekura/sekura has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install ai.sekura/sekura?

ai.sekura/sekura is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://sekura.ai/mcp) instead of running it locally.

What AI clients work with ai.sekura/sekura?

ai.sekura/sekura is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is ai.sekura/sekura actively maintained?

ai.sekura/sekura is actively maintained - last commit was 5 days ago.

ai.sekura/sekura

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

GitHub

No known CVEs

MIT license

Actively maintained

Last commit 5d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

ai.sekura/sekura is an MCP server that scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent. Its tool list has not been published yet over http, requires no API key, and scores 37/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://sekura.ai/mcp
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ai-sekura-sekura)](https://mcppedia.org/s/ai-sekura-sekura)

Read me

What ai.sekura/sekura does

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is ai.sekura/sekura safe to use?: ai.sekura/sekura has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install ai.sekura/sekura?: ai.sekura/sekura is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://sekura.ai/mcp) instead of running it locally.
What AI clients work with ai.sekura/sekura?: ai.sekura/sekura is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is ai.sekura/sekura actively maintained?: ai.sekura/sekura is actively maintained - last commit was 5 days ago.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.6k 2

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

3.0k 4

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

MCP Security Weekly

Get CVE alerts and security updates for ai.sekura/sekura and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://sekura.ai/mcp
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ai-sekura-sekura)](https://mcppedia.org/s/ai-sekura-sekura)

Read me

What ai.sekura/sekura does

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Sekura plugins

Manifests that connect AI coding tools to the Sekura MCP server at https://sekura.ai/mcp.

Sekura scans a GitHub repository for vulnerabilities and delivers a report with proof for every finding; from your agent you can see your repositories, start a scan you have approved, read the findings, and manage a schedule.

This repository holds manifests only. Every one of them points at the same server, and nothing here runs on your machine: sign-in is OAuth 2.1 at the server (PKCE, Dynamic Client Registration, Client ID Metadata Documents), so no key is copied anywhere. The full guide for every tool, with the exact snippet or one-click link, is at https://sekura.ai/connect/.

Install

Tool	How
Claude Code	`/plugin marketplace add sekuraai/sekura-plugins`, then `/plugin install sekura@sekura`. Or without the plugin: `claude mcp add --transport http sekura https://sekura.ai/mcp` then `/mcp` to sign in
Claude (app and web)	Settings, Connectors, Add custom connector, address `https://sekura.ai/mcp`
Cursor	The one-click link on https://sekura.ai/connect/, or clone this repository into `~/.cursor/plugins/local/` (the plugin is this repository's root)
Kiro	Add Custom Power, Import power from GitHub, this repository
Antigravity	`antigravity/`: the manifest and `mcp_config.json`; or add `https://sekura.ai/mcp` as a custom server
VS Code, Copilot CLI, JetBrains, Zed, Codex, Devin, Replit, Lovable, Bolt, v0 and the rest	https://sekura.ai/connect/

What is where

Path	Venue
`.claude-plugin/marketplace.json`, `plugins/sekura/`	Claude Code plugin marketplace; the plugin's skill teaches the quote-then-confirm flow
`plugin.json`, `mcp.json`	Agent Plugins standard manifest at the root: Kiro Powers, Cursor
`.cursor-plugin/plugin.json`	Cursor Marketplace and cursor.directory
`registry/server.json`	The official MCP Registry entry, `ai.sekura/sekura`, published with `mcp-publisher`
`docker/servers/sekura/`	The Docker MCP Catalog entry, submitted as a pull request to docker/mcp-registry
`cline/`	The Cline marketplace listing: README, `llms-install.md`, 400 by 400 logo
`antigravity/`	Google Antigravity plugin manifest and MCP configuration
`openai/`	OpenAI plugin directory (ChatGPT and Codex): `plugin.json`, `mcp.json` at `https://sekura.ai/mcp/community`, icons; uploaded as a ZIP
`gemini/gemini-extension.json`	Gemini CLI extension (legacy gallery)
`logo.png`	The Sekura owl, 512 by 512

How the server behaves

Read tools are free and need no confirmation. Every write tool (start a scan, start a recurring plan, run a plan now, cancel) answers first with a preview that names the repository, the authorization wording and the price, and runs only when called again with the arguments the preview names, after the user has agreed in the conversation. A card is charged only after the user approves the quoted amount; otherwise the answer carries a Stripe Checkout link.

Privacy: https://sekura.ai/privacy/. Terms: https://sekura.ai/terms/. Support: hello@sekura.ai.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is ai.sekura/sekura safe to use?: ai.sekura/sekura has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install ai.sekura/sekura?: ai.sekura/sekura is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://sekura.ai/mcp) instead of running it locally.
What AI clients work with ai.sekura/sekura?: ai.sekura/sekura is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is ai.sekura/sekura actively maintained?: ai.sekura/sekura is actively maintained - last commit was 5 days ago.