CyberLens

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/shadoprizm-cyberlens-mcp-server

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

9 read · 0 write · 0 delete · 1 not yet classified

Secrets

1 (API keys, tokens or passwords)

Install scripts

Not scanned yet

Runs as

Node.js package

Tools (10)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• connect_account

  Connect your CyberLens account to this MCP server. Opens your browser to cyberlensai.com where you can sign up for free or log in. After authorizing, your API key is securely saved locally. Free accounts get 5 scans/month. No credit card required. If you already have an API key, you can also set the CYBERLENS_API_KEY environment variable instead. Cloud tools can also launch this flow automatically the first time repository or account-only tools need an account.

• get_account_quota

  Get your CyberLens account quota and remaining cloud scans. Returns: - Current plan name - Total scans used, limit, and remaining - Website scan usage - Repository or skill scan usage Use this to confirm your account is connected and check how many cloud scans remain. If no account is connected yet, the MCP server will launch the CyberLens browser flow automatically before checking quota.

• get_remediation_guide

  Get detailed remediation guidance for a specific vulnerability or CWE. Returns: - Explanation of the vulnerability - Step-by-step fix instructions - Code examples (before/after) - Testing procedures - Prevention strategies Uses a built-in local guide library, so it still works even when no cloud guidance endpoint is available.

• get_scan_results

  Retrieve detailed findings from a completed security scan. Returns: - Overall security score (0-100) - List of vulnerabilities with severity levels - CWE classifications - Specific recommendations for each finding - CVE references where applicable - Remediation guidance links Use this after initiating a full cloud scan with scan_website or scan_repository. Local quick website scans return findings immediately and do not produce a scan ID. If no account is connected yet, the MCP server will connect first and then retrieve the cloud scan result.

• get_scan_transparency

  Get an honest transparency report for this MCP server. Returns: - Current MCP server version - Local check inventory and category counts - Which live cloud API endpoints this server actually uses - Recent changes to the MCP scan surface Use this to understand exactly what this server checks locally and which cloud features are live.

• get_security_score

  Get a quick security rating for a website. Returns: - Overall security score (0-100) - Grade (A-F) - Key metrics summary - Quick wins for improvement Without an account, this uses the local quick website scanner. With an account, this uses the full CyberLens cloud path. If cloud website quota is exhausted, CyberLens falls back to the local quick score automatically.

• scan_claw_skill

  Scan an Open CLAW skill or plugin from CLAUDE Hub before installation. Runs locally in the MCP server and understands CLAW skill packaging, manifest permissions, and AI agent security models. Performs comprehensive security analysis on: - CLAUDE Hub skill/plugin download links - Skill manifest files - Embedded code and dependencies Checks for: - Hardcoded secrets and API keys in skill code - Vulnerable npm/pip dependencies - Insecure file operations - Suspicious network requests - Unsafe eval() or code injection patterns - Privilege escalation risks - Data exfiltration patterns - Permission…

• scan_repository

  Scan a public repository for secrets, dependency risks, and suspicious code patterns. Uses the live CyberLens cloud repository scanner for: - Public GitHub, GitLab, and Bitbucket repositories - Supported CLAUDE Hub or direct ZIP download URLs Checks for: - Exposed secrets and credentials - Vulnerable dependencies - Suspicious or risky code behavior - Trust posture and repository hygiene signals - Artifact and package reputation issues Returns a scan ID that can be used with get_scan_results to retrieve findings. If no account is connected yet, the MCP server will open the CyberLens browser …

• scan_website

  Scan a website for security vulnerabilities with a local quick mode and a full cloud mode. Without a connected account, the MCP server runs a local quick scan immediately. That local mode covers roughly 15 core checks such as HTTPS, security headers, basic form issues, inline scripts, and server disclosure. With a connected account, CyberLens starts the full cloud scan with 70+ checks. That path returns a scan ID you can use with get_scan_results. If cloud website quota is exhausted, CyberLens falls back to the local quick scan automatically and opens the upgrade page.

• validate_claw_skill

  Validate a CLAW skill manifest and configuration for security best practices. Checks: - Skill manifest.json structure and required fields - Permission scopes (are they minimal?) - External API dependencies - File system access patterns - Environment variable usage - Plugin isolation safety Use this before publishing a skill to CLAUDE Hub or for CI/CD validation.

Signals

Stars

0

Forks

0

Open issues

0

Last commit

Sep 20, 2026 (1 month ago)

Last release

Mar 29, 2026 (7 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.shadoprizm/cyberlens-mcp-server

Version

1.0.0

Auth

API key

Packages

npm @shadoprizm/cyberlens-mcp-server

License

MIT

Repository

github.com/shadoprizm/cyberlens-mcp-server

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql