Arcwall Security

Security scanning for AI coding tools.

Connector by rom-baro · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 1

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/rom-baro-arcwall-security

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools: 5 read · 1 write · 0 delete · 1 not yet classified
Secrets: 1 (API keys, tokens or passwords)
Install scripts: Not scanned yet
Runs as: Node.js package

Tools by what they do 7

Read from the source code; the running server may list different tools.

Read 5 · Look things up without changing anything.

arcwall_check_prompt
arcwall_scan_agent_instructions
arcwall_scan_dependencies
arcwall_scan_mcp
arcwall_scan_secrets

Write 1 · Create, change, send or run things.

arcwall_pre_commit

Not yet classified 1 · We could not tell from the name and description.

arcwall_threat_model

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

ARCWALL_API_KEY

Files it touches

Any path the agent passes to its tools

Tools (7)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

arcwall_check_prompt
Test a system prompt for injection vulnerabilities, jailbreak susceptibility, missing guardrails, and excessive agency. Include test messages to check multi-turn vulnerabilities.
arcwall_pre_commit
Security check before committing. Scans staged files for secrets and checks MCP configs. Returns CLEAR TO COMMIT or BLOCKED with issues to fix.
arcwall_scan_agent_instructions
Scan agent instruction files for security vulnerabilities. Covers CLAUDE.md, .cursorrules, .windsurfrules, AGENTS.md and other formats. Detects prompt injection, sensitive data, and missing guardrails.
arcwall_scan_dependencies
Check dependencies for known CVEs. Scans package.json for vulnerable packages with safe version recommendations.
arcwall_scan_mcp
Scan MCP server configurations for prompt injection, excessive permissions, and unverified server origins. Scans .cursor/mcp.json, .vscode/mcp.json, .claude/mcp.json and other MCP config files.
arcwall_scan_secrets
Scan workspace for hardcoded API keys, passwords, private keys, tokens, and credentials. Run before committing or deploying.
arcwall_threat_model
Generate a STRIDE threat model for the current codebase. Identifies trust boundary gaps, authorization issues, data flow exposures, and architectural risks. Results saved to Arcwall dashboard.

Signals

Stars: 1
Forks: 0
Open issues: 0
Weekly downloads: 20
Last commit: May 7, 2026 (5 months ago)
Last release: May 7, 2026 (5 months ago)
Last package publish: May 7, 2026 (5 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name: io.github.rom-baro/arcwall-security
Version: 1.0.1
Auth: API key
Packages: npm @arcwall/mcp-server
License: MIT
Repository: github.com/rom-baro/arcwall-mcp
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

Cite this page

Arcwall Security MCP server. Agent Mart. https://agentmart.dev/connectors/rom-baro-arcwall-security (last updated 2026-10-24)