cmdxray MCP Server: Install & Setup

Install cmdxray in Claude Code

Claude Code

claude mcp add cmdxray -- npx -y cmdxray

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "cmdxray": {
      "command": "npx",
      "args": [
        "-y",
        "cmdxray"
      ]
    }
  }
}

Frequently asked questions

What does the cmdxray MCP server do?

Offline safety gate for agent shell commands: rates each command as danger, caution or none and explains every flag, pipe, redirect and subshell.

Is the cmdxray MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does cmdxray run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add cmdxray to Claude Code?

Run: claude mcp add cmdxray -- npx -y cmdxray

More security & identity MCP servers

View all

Frisk

1120

Jiangw2718i/frisk

Screen x402 payment counterparties before paying: address sanity, payTo swap, transport safety and spend policy checks with an allow, review or block verdict.

LocalPaid serviceTypeScript

Osv UI

toan203/osv-ui

Visual CVE audit dashboard for npm, Python, Go and Rust using OSV data, with browser-based human review and fixes applied only after confirmation.

LocalFreeTypeScript

Kepil

oleg-vdv/kepil

Accountability layer for AI agents: per-version passports, per-job mandates with spending limits, a fail-closed action gate and a hash-chained journal.

LocalFreePython

Enigma Python

denismaggior8/enigma-python-mcp

Encrypt and decrypt messages with historically accurate Enigma machine emulators from the enigmapython library.

LocalAccount neededPython

Patch Tuesday

jonnybottles/patch-tuesday-mcp

Microsoft Patch Tuesday triage from the MSRC Security Update Guide: monthly rollups, CVE/KB lookups, supersedence chains and EPSS/CISA KEV urgency ranking.

Local + RemoteAccount neededPython

AgentAvow

AgentAvow/AgentAvow

Signed, recomputable safety scores for MCP servers, packages and tools, with offline-verifiable attestations and a GitHub Action to gate CI merges.

LocalFreePython