Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"arcwall": {
"env": {
"ARCWALL_API_KEY": "your-key-here"
},
"args": [
"@arcwall/mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
An evil MCP server used for redteam testing
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.
Security-first platform for AI agents. 38 specialized agents, 15 AI-powered extensions, zero-knowledge multi-agent orchestration. SENTINEL WAF, Ed25519 auth, 2.6M grounding facts.
MCP Security Weekly
Get CVE alerts and security updates for io.github.rom-baro/arcwall-security and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
Get your free API key at https://arcwall.io
Add to your MCP config:
Claude Code (~/.claude/mcp.json):
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.
arcwall_scan_secrets — hardcoded credentialsarcwall_scan_mcp — MCP config vulnerabilitiesarcwall_scan_agent_instructions — CLAUDE.md, .cursorrules securityarcwall_threat_model — STRIDE analysisarcwall_check_prompt — prompt injection testingarcwall_pre_commit — pre-commit security checkarcwall_scan_dependencies — known CVEs in packagesAsk your AI assistant: