Is SafeAI safe to use?

SafeAI has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install SafeAI?

SafeAI supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with SafeAI?

SafeAI is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is SafeAI actively maintained?

SafeAI is actively maintained - last commit was 1 day ago. It has 32 GitHub stars.

SafeAI

Name: SafeAI
Author: ikaruscareer

SafeAI-Static-Analyzer · by ikaruscareer

Static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and governance gaps before deployment.

32 GitHub PyPI

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 15m ago

Edit this pageView history

SafeAI is an MCP server that static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and governance gaps before deployment. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 61/100 on MCPpedia's security, maintenance and efficiency rubric.

Developer Tools AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "safeai": {
      "args": [
        "SafeAI-Static-Analyzer"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/safeai)](https://mcppedia.org/s/safeai)

Read me

What SafeAI does

Enjoying SafeAI? A ⭐ on GitHub helps more security teams find it.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

61/100across 5 weighted dimensions

How we score →

0255075100

−39

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked SafeAI-Static-Analyzer against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is SafeAI safe to use?: SafeAI has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install SafeAI?: SafeAI supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with SafeAI?: SafeAI is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is SafeAI actively maintained?: SafeAI is actively maintained - last commit was 1 day ago. It has 32 GitHub stars.

Similar servers

Others in developer-tools / ai-ml

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.6k 2

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

3.0k 4

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

MCP Security Weekly

Get CVE alerts and security updates for SafeAI and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "safeai": {
      "args": [
        "SafeAI-Static-Analyzer"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/safeai)](https://mcppedia.org/s/safeai)

Read me

What SafeAI does

Enjoying SafeAI? A ⭐ on GitHub helps more security teams find it.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

SafeAI — Agent Authority Security for the Software Supply Chain

Enjoying SafeAI? A ⭐ on GitHub helps more security teams find it.

Know what your AI agent can do before you deploy it.

SafeAI statically maps agent capabilities, tools, MCP integrations, and authority changes, then turns material changes into explainable CI/CD security decisions and portable evidence. Technically, SafeAI is a Static AI Capability & Risk Analyzer: it scans AI application source code for security risks, capability exposure, and governance gaps. It is offline and source-private by default — it never executes agents or calls LLMs, and network activity occurs only through explicitly enabled integration commands (currently only --pr-comment-post). It integrates into CI/CD pipelines.

Three pillars — DISCOVER / COMPARE / GOVERN:

Pillar	Question	What SafeAI does
DISCOVER	What can the agent access?	Builds an evidence-backed model of agent authority: tools, MCP servers, filesystem, shell, databases, APIs, destinations, memory, delegation, autonomy, approval controls
COMPARE	What changed?	Diffs authority against the approved baseline: new tools, `read → write` widening, new destinations, removed approval gates
GOVERN	Should that change be allowed?	Deterministic CI/CD decisions — `pass`, `review-required`, `block`, `accepted-exception` — with evidence, never an opaque score

SafeAI is not a runtime guardrail and does not certify an agent as safe. It provides source-first, evidence-backed visibility into agent authority and meaningful changes before deployment.

🌐 Ikarus AI Labs Research Hub — SafeAI: ikaruslabs.net/safeai | OpenPulse: ikaruslabs.net/openpulse | Research: ikaruslabs.net/research

Know Your Agent (KYA)

SafeAI now turns static scan results into a private, historical inventory of AI agents and their findings.

Why SafeAI?

Traditional application security tools (SAST, SCA, IaC scanning) are not designed for AI agent systems. AI applications introduce new risk surfaces:

Prompt injection — untrusted input flows into model prompts
Agent tool misuse — agents with filesystem, shell, or database access
Capability sprawl — frameworks expose capabilities without visibility
MCP exposure — Model Context Protocol endpoints and tools
Governance gaps — missing authentication, permissions, audit trails

SafeAI fills this gap by analyzing frameworks, agents, tools, capabilities, and MCP integrations at rest—before deployment.

SafeAI analyzes AI applications without executing them, helping developers discover capabilities, identify potential risks, and improve governance early in the software l

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

61/100across 5 weighted dimensions

How we score →

0255075100

−39

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked SafeAI-Static-Analyzer against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is SafeAI safe to use?: SafeAI has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install SafeAI?: SafeAI supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with SafeAI?: SafeAI is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is SafeAI actively maintained?: SafeAI is actively maintained - last commit was 1 day ago. It has 32 GitHub stars.