# AppLedger MCP server

> Performs plain-English security scans on AI-built applications and generates fix requests for coding agents.

- Repository: https://github.com/contentasoftware/appledger
- Page: https://hostedmcp.org/servers/contentasoftware/appledger
- Transport: stdio
- Stars: 0
- License: MIT
- Latest version: 0.2.5

## Install

### Claude Code

```sh
claude mcp add --env APPLEDGER_KEY=<YOUR_APPLEDGER_KEY> appledger -- uvx appledger
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "appledger": {
      "command": "uvx",
      "args": [
        "appledger"
      ],
      "env": {
        "APPLEDGER_KEY": "<YOUR_APPLEDGER_KEY>"
      }
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "appledger": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "appledger"
      ],
      "env": {
        "APPLEDGER_KEY": "<YOUR_APPLEDGER_KEY>"
      }
    }
  }
}
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "appledger": {
      "command": "uvx",
      "args": [
        "appledger"
      ],
      "env": {
        "APPLEDGER_KEY": "<YOUR_APPLEDGER_KEY>"
      }
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.appledger]
command = "uvx"
args = ["appledger"]

[mcp_servers.appledger.env]
APPLEDGER_KEY = "<YOUR_APPLEDGER_KEY>"
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "appledger": {
      "command": "uvx",
      "args": [
        "appledger"
      ],
      "env": {
        "APPLEDGER_KEY": "<YOUR_APPLEDGER_KEY>"
      }
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `APPLEDGER_KEY` | no | yes | Optional dashboard connection key (al_...). Without it, nothing goes to a dashboard; a hosted check returns a link that saves its result to a free account (the summary is kept up to 24 hours). |
| `APPLEDGER_MODE` | no | no | hosted (default): files Git would commit are sent to appledger.net, scanned and deleted. local: Trivy and Opengrep run on this machine. |

## FAQ

### How can I use the findings to fix my code?

The tool generates a 'fix-prompt.md' file which is a ready-made fix request that you can provide directly to your AI coding agent.