SafeWeave
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
Connector by safeweave.devOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.
npx agentmarket install connector/safeweave-dev-safeweave
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://mcp.safeweave.dev/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 9 read · 1 write · 0 delete · 2 not yet classified
- Secrets
- 1 (API keys, tokens or passwords)
- Install scripts
- None found
- Runs as
- Node.js package
Tools by what they do 12
Read from the source code; the running server may list different tools.
Read 9 · Look things up without changing anything.
check_containercheck_licensecheck_postureget_findingsget_security_scorescan_dependenciesscan_filescan_iacsuggest_fix
Write 1 · Create, change, send or run things.
set_profile
Not yet classified 2 · We could not tell from the name and description.
dast_checkscan_project
Secrets and settings it asks for
Secrets: values you paste in that let it act as you.
SAFEWEAVE_LICENSE_KEY
Network hosts it talks to 1
mcp.safeweave.dev· found in remote endpoint, install command
Files it touches
- Any path the agent passes to its tools
Tools (12)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
check_containerScan container images for known vulnerabilities (Self-Hosted Pro)
check_licenseCheck dependency license compliance — detect problematic licenses like AGPL, GPL (Self-Hosted Pro)
check_postureCheck API security posture — detect missing auth, rate limiting, security headers, CORS misconfig, missing input validation, and other security control gaps (Self-Hosted Pro)
dast_checkRun lightweight dynamic security testing on API endpoints (Self-Hosted Pro)
get_findingsGet current scan findings, optionally filtered by severity
get_security_scoreGet overall security posture score for the project
scan_dependenciesAudit project dependencies for known CVEs
scan_fileScan a single file for security vulnerabilities
scan_iacScan infrastructure-as-code files (Terraform, Dockerfile, Kubernetes) for misconfigurations (Self-Hosted Pro)
scan_projectRun a full security scan on the project. Collects files automatically when directory is accessible, or accepts files array for remote scanning.
set_profileSwitch the active compliance profile
suggest_fixGet remediation suggestions for a specific finding
Signals
- Stars
- 5
- Forks
- 0
- Open issues
- 0
- Last commit
- Oct 19, 2026 (10 days ago)
- Last release
- Oct 20, 2026 (10 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
dev.safeweave/safeweave- Version
- 0.7.5
- Auth
- Auth not stated, API key
- Packages
- npm safeweave-mcp
- License
- MIT
- Repository
- github.com/nickfluxk/safeweave
- Website
- safeweave.dev
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
SafeWeave MCP server. Agent Mart. https://agentmart.dev/connectors/safeweave-dev-safeweave (last updated 2026-10-24)