LocalFree

Valca MCP server

PranLabs/valca

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

2 GitHub stars1 forks
Source code Website

Install Valca in Claude Code

Claude Code
claude mcp add valca -- uvx valca
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "valca": {
      "command": "uvx",
      "args": [
        "valca"
      ]
    }
  }
}

Frequently asked questions

What does the Valca MCP server do?

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

Is the Valca MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Valca run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Valca to Claude Code?

Run: claude mcp add valca -- uvx valca

More security & identity MCP servers

View all

aictrl

2

aictrl-dev/skills

Project context, backlog tasks, and controlled workflows for coding agents. OAuth sign-in.

RemoteAccount needed

Two-Key

2

Insomniac-VibeLabs/two-key

Authorization proxy for another MCP server: a rule check and AI judges approve each tool call

LocalFree

Cinderfi

2

cinderfi/cinderfi-mcp

Retirement planning for Canada & US. CPP/OAS, Social Security, RRSP/TFSA, 401k/IRA, Monte Carlo.

RemoteAccount needed

Suprawall Plugins

67

wiserautomation/suprawall-plugins-

SupraWall security gateway for AI agents. Provides deterministic guardrails for MCP agents.

LocalAccount needed

PolicyLayer

2

PolicyLayer/mcp

The MCP server that vets MCP servers: identity, risk grade and per-tool risk before you install.

RemoteAccount needed

Sn1per

2

1N3/sn1per-mcp

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

LocalFree