1. Conduid
  2. Security
  3. Sekrd Security Scanner
MCP server · Security

Sekrd Security Scanner

· github.com/sekrdcom/sekrd-mcp-ts

Enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.

Unclaimed security
InstallView source
34Low

Scored 5 months ago · breakdown

About Sekrd Security Scanner

Sekrd Security Scanner is an MCP server in the Security category: enables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation. It has been installed 0 times through Conduid.

Install

Clone
git clone https://github.com/sekrdcom/sekrd-mcp-ts

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Sekrd Security Scanner

Powered by Claude · Grounded in docs

I know everything about Sekrd Security Scanner. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.

README

@sekrd/mcp-server

MCP server for Sekrd — deep security audit for AI-built apps. Run security scans directly from Cursor, Claude Code, and other AI IDEs.

Quick Start

npx -y @sekrd/mcp-server

Setup

Claude Code

claude mcp add sekrd -- npx -y @sekrd/mcp-server

With API key (paid plans, unlimited scans):

claude mcp add sekrd -e SEKRD_API_KEY=your_key -- npx -y @sekrd/mcp-server

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "sekrd": {
      "command": "npx",
      "args": ["-y", "@sekrd/mcp-server"],
      "env": {
        "SEKRD_API_KEY": "your_key_here"
      }
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sekrd": {
      "command": "npx",
      "args": ["-y", "@sekrd/mcp-server"],
      "env": {
        "SEKRD_API_KEY": "your_key_here"
      }
    }
  }
}

API Key

  • Without key: 10 free scans per month (IP rate limit)
  • With key: Unlimited scans on Pre-Launch Audit ($39 one-time) or Continuous Pro ($24-$29/mo) plans

Get your key at sekrd.com/dashboard/settings.

Tools

Tool Description
scan_url(url) Full security scan. Returns score, verdict (SHIP/BLOCK), findings + fix prompts.
get_scan(scan_id) Get results of a previous scan.
list_findings(scan_id) Get only findings with fix prompts for your IDE.

Example

You: Scan https://my-app.vercel.app for security issues

Sekrd: Score 34/100 — BLOCK
3 critical, 5 high, 2 medium findings

1. [CRITICAL] Stripe live secret key exposed in client bundle
   Fix: Move 'sk_live_...' to .env file and use NEXT_PUBLIC_ prefix only for public keys

2. [CRITICAL] Supabase RLS policy USING(true) on users table  
   Fix: Replace with USING(auth.uid() = user_id)

License

MIT

README mirrored from the source repository 5 months ago. The original is authoritative.

Questions

About Sekrd Security Scanner

How do I install Sekrd Security Scanner?

Run git clone https://github.com/sekrdcom/sekrd-mcp-ts, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is Sekrd Security Scanner safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sekrd Security Scanner still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.