About Sekrd Security Scanner
Sekrd Security Scanner is an MCP server published by sekrdcom in the Security category: enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/sekrdcom/sekrd-mcp-tsThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (3)
get_scan(scan_id)Get results of a previous scan.
Parameters not published.
list_findings(scan_id)Get only findings with fix prompts for your IDE.
Parameters not published.
scan_url(url)Full security scan. Returns score, verdict (SHIP/BLOCK), findings + fix prompts.
Parameters not published.
Ask AI
Ask AI about Sekrd Security Scanner
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
@sekrd/mcp-server
MCP server for Sekrd — deep security audit for AI-built apps. Run security scans directly from Cursor, Claude Code, and other AI IDEs.
Quick Start
npx -y @sekrd/mcp-server
Setup
Claude Code
claude mcp add sekrd -- npx -y @sekrd/mcp-server
With API key (paid plans, unlimited scans):
claude mcp add sekrd -e SEKRD_API_KEY=your_key -- npx -y @sekrd/mcp-server
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"sekrd": {
"command": "npx",
"args": ["-y", "@sekrd/mcp-server"],
"env": {
"SEKRD_API_KEY": "your_key_here"
}
}
}
}
Claude Desktop
Add to claude_desktop_config.json:
{
"mcpServers": {
"sekrd": {
"command": "npx",
"args": ["-y", "@sekrd/mcp-server"],
"env": {
"SEKRD_API_KEY": "your_key_here"
}
}
}
}
API Key
- Without key: 10 free scans per month (IP rate limit)
- With key: Unlimited scans on Pre-Launch Audit ($39 one-time) or Continuous Pro ($24-$29/mo) plans
Get your key at sekrd.com/dashboard/settings.
Tools
| Tool | Description |
|---|---|
scan_url(url) |
Full security scan. Returns score, verdict (SHIP/BLOCK), findings + fix prompts. |
get_scan(scan_id) |
Get results of a previous scan. |
list_findings(scan_id) |
Get only findings with fix prompts for your IDE. |
Example
You: Scan https://my-app.vercel.app for security issues
Sekrd: Score 34/100 — BLOCK
3 critical, 5 high, 2 medium findings
1. [CRITICAL] Stripe live secret key exposed in client bundle
Fix: Move 'sk_live_...' to .env file and use NEXT_PUBLIC_ prefix only for public keys
2. [CRITICAL] Supabase RLS policy USING(true) on users table
Fix: Replace with USING(auth.uid() = user_id)
License
MIT
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.