About io.github.rom-baro/arcwall-security
io.github.rom-baro/arcwall-security is an MCP server in the Security category: security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Install
claude mcp add io-github-rom-baro-arcwall-security -- npx -y @arcwall/mcp-servernpx -y @arcwall/mcp-serverThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about io.github.rom-baro/arcwall-security
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
@arcwall/mcp-server
Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
Setup
-
Get your free API key at https://arcwall.io
-
Add to your MCP config:
Claude Code (~/.claude/mcp.json):
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.
- Restart your AI tool — Arcwall is ready.
Tools
arcwall_scan_secrets— hardcoded credentialsarcwall_scan_mcp— MCP config vulnerabilitiesarcwall_scan_agent_instructions— CLAUDE.md, .cursorrules securityarcwall_threat_model— STRIDE analysisarcwall_check_prompt— prompt injection testingarcwall_pre_commit— pre-commit security checkarcwall_scan_dependencies— known CVEs in packages
Usage
Ask your AI assistant:
- "Scan this repo for secrets"
- "Check my MCP configs for vulnerabilities"
- "Is my CLAUDE.md safe?"
- "Generate a threat model for this project"
- "Run a security check before I commit"
- "Are there vulnerable packages in this project?"
Links
- Website: https://arcwall.io
- Dashboard: https://arcwall.io/app.html
- Docs: https://arcwall.io/docs.html
- GitHub: https://github.com/rom-baro/arcwall-mcp
- Support: hello@arcwall.io
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.