Skip to content
Agentmart
Submit a tool

SafeWeave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

Connector by safeweave.devOfficial · Domain verified by the MCP Registry

IndexedMITLocal (stdio)Remote (HTTP)★ 5
Write a review

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/safeweave-dev-safeweave

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://mcp.safeweave.dev/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
9 read · 1 write · 0 delete · 2 not yet classified
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Node.js package

Tools by what they do 12

Read from the source code; the running server may list different tools.

Read 9 · Look things up without changing anything.

  • check_container
  • check_license
  • check_posture
  • get_findings
  • get_security_score
  • scan_dependencies
  • scan_file
  • scan_iac
  • suggest_fix

Write 1 · Create, change, send or run things.

  • set_profile

Not yet classified 2 · We could not tell from the name and description.

  • dast_check
  • scan_project

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • SAFEWEAVE_LICENSE_KEY

Network hosts it talks to 1

  • mcp.safeweave.dev · found in remote endpoint, install command

Files it touches

  • Any path the agent passes to its tools

Tools (12)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • check_container

    Scan container images for known vulnerabilities (Self-Hosted Pro)

  • check_license

    Check dependency license compliance — detect problematic licenses like AGPL, GPL (Self-Hosted Pro)

  • check_posture

    Check API security posture — detect missing auth, rate limiting, security headers, CORS misconfig, missing input validation, and other security control gaps (Self-Hosted Pro)

  • dast_check

    Run lightweight dynamic security testing on API endpoints (Self-Hosted Pro)

  • get_findings

    Get current scan findings, optionally filtered by severity

  • get_security_score

    Get overall security posture score for the project

  • scan_dependencies

    Audit project dependencies for known CVEs

  • scan_file

    Scan a single file for security vulnerabilities

  • scan_iac

    Scan infrastructure-as-code files (Terraform, Dockerfile, Kubernetes) for misconfigurations (Self-Hosted Pro)

  • scan_project

    Run a full security scan on the project. Collects files automatically when directory is accessible, or accepts files array for remote scanning.

  • set_profile

    Switch the active compliance profile

  • suggest_fix

    Get remediation suggestions for a specific finding

Signals

Stars
5
Forks
0
Open issues
0
Last commit
Oct 19, 2026 (10 days ago)
Last release
Oct 20, 2026 (10 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
dev.safeweave/safeweave
Version
0.7.5
Auth
Auth not stated, API key
Packages
npm safeweave-mcp
License
MIT
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Cite this page

SafeWeave MCP server. Agent Mart. https://agentmart.dev/connectors/safeweave-dev-safeweave (last updated 2026-10-24)