Securityscan

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/securityscan-api-securityscan

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

7 read · 1 write · 0 delete

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Python package

Tools (8)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• audit_mcp_server_config

  Audit an MCP client configuration for security risks — works offline, no external service required. Detects: tool poisoning, hidden/coercive instructions in tool descriptions, hardcoded credentials, unpinned packages (rug-pull risk), insecure transport, and toxic capability combinations (shell + network, file-read + network). Args: config_json: The FULL JSON content of the MCP config file as a string (e.g. claude_desktop_config.json or .mcp.json). Paste the file content, not the path. Returns: JSON report: verdict, findings by severity, per-server ri…

• check_dependencies

  Check the health of your agent's external dependencies: uptime, SSL validity, blacklist status, and a trust score 0-100 (DepScan). Args: endpoints: List of URLs your agent/skill depends on, e.g. ["https://api.openai.com", "https://api.stripe.com"] Returns: JSON with per-endpoint status and trust scores.

• full_stack_audit

  Complete security posture in one call: audits the MCP config, checks dependency health, analyzes an untrusted skill, scans the local network gateway, and scans any payload you're about to send out for secrets/PII — then correlates everything into a single prioritized report. Pass only what you have; each section is skipped gracefully if its input or service is missing. Args: mcp_config_json: MCP config content as string (optional) dependency_endpoints: URLs your stack depends on (optional) skill_url: untrusted skill to vet (optional) network_target: IP to scan, e.g. "192.168.1…

• network_scan

  Active security scan of a device or host with an autonomous AI agent that decides which follow-up probes to run (ActiveScanner). Only scan targets you own or have permission to test. Args: target: IP, CIDR, or hostname. Examples: "192.168.1.1", "10.0.0.0/24" authorized: REQUIRED. You must set this to True to certify that you own the target or have explicit permission to test it. Setting it to False (or omitting it) aborts the scan. Scanning without authorization may be illegal (CFAA / Computer Misuse Act). scan_type: "quick" (~30s, t…

• scan_secrets

  Scan a text payload (a prompt, an outbound API body, a file's contents) for secrets and PII BEFORE it leaves for an LLM or external API, and return a redacted copy. Catches the #1 real-world agent incident: secrets/PII leaking into a model's context. WORKS OFFLINE with no API key — the detection runs in-process (pure regex + Luhn check, no network). If a SecretScan backend key IS configured, the scan is routed there instead (which also persists an audit record). Args: text: The payload to inspect (prompt, request body, document text). redact: If True (default), each match is replaced…

• scan_skill

  Analyze an AI agent skill for prompt injection, malware patterns, and OWASP LLM Top 10 issues BEFORE installing it (SecurityScan). Args: skill_url: URL of the skill to analyze (e.g. a GitHub skill URL). Returns: JSON with risk score, detected patterns, and install recommendation.

• securityscan_checkout

  Start a Stripe checkout to buy a SecurityScan tier (agent-native sales). Returns a payment URL to hand to your user AND a PENDING API key that activates automatically once payment clears — no other setup step. Args: tier: one of "founder" ($29 one-time), "personal", "executive", "enterprise" (monthly) email: optional — prefills the Stripe checkout page for your user existing_key: optional — upgrade an existing ask_live_ key instead of minting a new one Returns: JSON with checkout_url (give it to your user) and the pending api_key.

• securityscan_pricing

  SecurityScan catalog: tiers, prices, quotas and the evidence behind the product — the fact sheet an agent needs to evaluate or recommend a purchase to its user. Fully offline, no API key required. Returns: JSON with the tier table (price / target slots / scan types), the pricing model, benchmark evidence, and how to buy.

Signals

Stars

0

Forks

0

Open issues

0

Weekly downloads

25

Last commit

Aug 30, 2026 (1 month ago)

Last release

Aug 30, 2026 (1 month ago)

Last package publish

Aug 30, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.securityscan-api/securityscan

Version

0.2.0

Auth

No auth

Packages

pypi securityscan-mcp

License

Apache-2.0

Repository

github.com/securityscan-api/securitystack-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql