🔒

Sekrd Security Scanner

Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.

0 installs

Trust: 34 — Low

Security

Ask AI about Sekrd Security Scanner

I know everything about Sekrd Security Scanner. Ask me about installation, configuration, usage, or troubleshooting.

0/500

Loading tools...

Reviews

Documentation

@sekrd/mcp-server

MCP server for Sekrd — deep security audit for AI-built apps. Run security scans directly from Cursor, Claude Code, and other AI IDEs.

Quick Start

npx -y @sekrd/mcp-server

Setup

Claude Code

claude mcp add sekrd -- npx -y @sekrd/mcp-server

With API key (paid plans, unlimited scans):

claude mcp add sekrd -e SEKRD_API_KEY=your_key -- npx -y @sekrd/mcp-server

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "sekrd": {
      "command": "npx",
      "args": ["-y", "@sekrd/mcp-server"],
      "env": {
        "SEKRD_API_KEY": "your_key_here"
      }
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sekrd": {
      "command": "npx",
      "args": ["-y", "@sekrd/mcp-server"],
      "env": {
        "SEKRD_API_KEY": "your_key_here"
      }
    }
  }
}

API Key

Without key: 10 free scans per month (IP rate limit)
With key: Unlimited scans on Pre-Launch Audit ($39 one-time) or Continuous Pro ($24-$29/mo) plans

Get your key at sekrd.com/dashboard/settings.

Tools

Tool	Description
`scan_url(url)`	Full security scan. Returns score, verdict (SHIP/BLOCK), findings + fix prompts.
`get_scan(scan_id)`	Get results of a previous scan.
`list_findings(scan_id)`	Get only findings with fix prompts for your IDE.

Example

You: Scan https://my-app.vercel.app for security issues

Sekrd: Score 34/100 — BLOCK
3 critical, 5 high, 2 medium findings

1. [CRITICAL] Stripe live secret key exposed in client bundle
   Fix: Move 'sk_live_...' to .env file and use NEXT_PUBLIC_ prefix only for public keys

2. [CRITICAL] Supabase RLS policy USING(true) on users table  
   Fix: Replace with USING(auth.uid() = user_id)

License

MIT