SecurityScan MCP Server: Install & Setup

Install SecurityScan in Claude Code

Claude Code

claude mcp add --transport http securityscan https://apisecurityscan.net/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "securityscan": {
      "url": "https://apisecurityscan.net/mcp"
    }
  }
}

Frequently asked questions

What does the SecurityScan MCP server do?

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Is the SecurityScan MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does SecurityScan run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add SecurityScan to Claude Code?

Run: claude mcp add --transport http securityscan https://apisecurityscan.net/mcp

More version control MCP servers

View all

Sekura

sekuraai/sekura-plugins

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

RemoteAccount needed

Secure Flows

michal-lefler/secure-flows

MCP server for secureFlows (secure-flows.com). Alias of io.github.michal-lefler/secureflows-mcp.

RemoteAccount needed

SetFork

com.setfork/setfork

Runnable, versioned lists for agents: tools, prompts and lists as resources. Git under the hood.

RemoteAccount needed

Secrets Leak Audit

tylerscomic-lab/secrets-leak-audit-mcp

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

RemoteAccount needed

SHPBL

com.shpbl/repository-audit-and-repair

Audit and repair any public GitHub repo. Free survey; paid source, unified diffs and a pull request.

RemoteFree

searchcode

com.searchcode/mcp

Code intelligence for LLMs. Analyze, search, and retrieve code from any public git repository.

RemoteAccount needed