About CodeInspectus
CodeInspectus is an MCP server in the Security category: local-first MCP security scanner for AI-generated web apps.
Install
Claude Code
claude mcp add codeinspectus -- npx -y codeinspectusnpx
npx -y codeinspectusThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (7)
codeinspectus_compliance_reportPer-framework **code-level control coverage** (not certification).
Parameters not published.
codeinspectus_explain_findingDeep explanation + full remediation for one finding.
Parameters not published.
codeinspectus_generate_sbomCycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose).
Parameters not published.
codeinspectus_list_rulesActive detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repair state.
Parameters not published.
codeinspectus_rescanRe-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage.
Parameters not published.
codeinspectus_scanFull local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations, framework tags, and three-state repository evidence for supported runtime controls.
Parameters not published.
codeinspectus_setupOffline setup plan, saved decline choices, or approval-gated verified downloads to `~/.codeinspectus`; never writes to the target repository.
Parameters not published.
Ask AI
✦
Ask AI about CodeInspectus
Powered by Claude · Grounded in docs
I know everything about CodeInspectus. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.