CodeInspectus MCP Server: Install & Setup

Install CodeInspectus in Claude Code

Claude Code

claude mcp add codeinspectus -- npx -y codeinspectus

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "codeinspectus": {
      "command": "npx",
      "args": [
        "-y",
        "codeinspectus"
      ]
    }
  }
}

Frequently asked questions

What does the CodeInspectus MCP server do?

Local security scanner for AI-generated JS/TS that combines Opengrep, Gitleaks and Trivy with checks for exposed secrets, Supabase RLS and prompt injection.

Is the CodeInspectus MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does CodeInspectus run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add CodeInspectus to Claude Code?

Run: claude mcp add codeinspectus -- npx -y codeinspectus

More security & identity MCP servers

View all

Authenticator

firstorderai/authenticator_mcp

Securely interact with the Authenticator App.

LocalFreeTypeScript

Bastion

71.3k

Gowthaman90/mcp-bastion

Security proxy for MCP servers: tool-definition pinning, tool-poisoning and exfiltration detection, injection blocking, secret redaction and audit trails.

LocalFreeTypeScript

Keycloak

sshaaf/keycloak-mcp-server

designed to work with Keycloak for identity and access management, with about 40+ tools covering, Users, Realms, Clients, Roles, Groups, IDPs, Authentication. Native builds available.

LocalFree

Database Sentinel

Farenhytee/database-sentinel

Read-only security audit for Supabase. Four tools surface RLS gaps, permissive policies, exposed functions and grants; an audit prompt returns scored findings with fix SQL.

LocalAccount neededPython

Servicenow AI

111.1k

IvanBBaev/servicenow-mcp-ai

ServiceNow MCP server — 100 tools over the full REST surface, every auth method, flows, diagrams.

Local + RemoteFree

Security

fr0gger/MCP_Security

Query the ORKL API to fetch threat reports, analyze threat actors and retrieve intelligence sources.

LocalAccount neededTypeScript