Valca

Scans code, IaC and AI-agent config for security problems.

Connector by pranlabs · GitHub account verified by the MCP Registry

IndexedLicense unknownLocal (stdio)★ 2

Chalk Labs

Need help deploying Valca?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/pranlabs-valca

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools: 2 read · 0 write · 0 deleteRead-only
Secrets: None asked for
Install scripts: None found
Runs as: Python package

Tools by what they do 2

Read from the source code; the running server may list different tools.

Read 2 · Look things up without changing anything.

list_rules
scan

Network hosts it talks to 6

api.osv.dev · found in code
github.com · found in code
json.schemastore.org · found in code
osv.dev · found in code
valca.io · found in code
yourdomain.com · found in code

Files it touches

~/.ssh
/opt/homebrew/bin/npm
/opt/homebrew/bin/osv-scanner
/opt/homebrew/bin/pip-audit
/opt/homebrew/bin/vigil
/usr/local/share/vigil/hook.sh
Your home directory (~)
Any path the agent passes to its tools

Tools (2)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

list_rules
Return the rule catalogue: every rule id, its severity, and what it catches.
scan
Scan a file or directory for security problems and return the findings. Covers hardcoded secrets, insecure Docker and Kubernetes configuration, Terraform and IAM policy, dependency vulnerabilities, and the AI-agent attack surface: prompt injection, unsafe MCP server configuration, and dangerous instructions in agent configuration files. `path` is interpreted relative to the scan root and may not leave it. Returned file paths are relative to that root. Matched source lines are not returned. Project configuration in `.valcarc` or `.vigilrc` is honoured.

Signals

Stars: 2
Forks: 1
Open issues: 0
Weekly downloads: 82
Last commit: Oct 10, 2026 (20 days ago)
Last release: Oct 6, 2026 (24 days ago)
Last package publish: Sep 28, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name: io.github.pranlabs/valca
Version: 0.6.1
Auth: No auth
Packages: pypi valca
License: License unknown
Repository: github.com/PranLabs/valca
Website: valca.io
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get Valca running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying Valca?

Call Get help

Cite this page

Valca MCP server. Agent Mart. https://agentmart.dev/connectors/pranlabs-valca (last updated 2026-10-24)