# SecurityScan MCP server

> Secures AI agents by auditing MCP configurations, redacting secrets, vetting skills, and performing network scans.

- Repository: https://github.com/securityscan-api/securitystack-mcp
- Page: https://hostedmcp.org/servers/securityscan-api/securitystack-mcp
- Transport: stdio
- Stars: 0
- License: Apache-2.0
- Latest version: 0.2.0

## Install

### Claude Code

```sh
claude mcp add securitystack-mcp -- uvx securityscan-mcp
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "securitystack-mcp": {
      "command": "uvx",
      "args": [
        "securityscan-mcp"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "securitystack-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "securityscan-mcp"
      ]
    }
  }
}
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "securitystack-mcp": {
      "command": "uvx",
      "args": [
        "securityscan-mcp"
      ]
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.securitystack-mcp]
command = "uvx"
args = ["securityscan-mcp"]
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "securitystack-mcp": {
      "command": "uvx",
      "args": [
        "securityscan-mcp"
      ]
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `ACTIVESCANNER_API_KEY` | no | no |  |
| `DEPSCAN_API_KEY` | no | no |  |
| `SECRETSCAN_API_KEY` | no | no |  |
| `SECURITYSCAN_API_KEY` | no | no |  |

## Tools (8)

- `audit_mcp_server_config`
- `scan_secrets`
- `scan_skill`
- `check_dependencies`
- `network_scan`
- `full_stack_audit`
- `securitystack_pricing`
- `securitystack_checkout`

## FAQ

### Do I need an API key to audit my MCP config or scan for secrets?

No, the audit_mcp_server_config and scan_secrets tools run offline and in-process without requiring an API key.

### How do I install the SecurityScan MCP server?

You can install it via pip using the command `pip install securityscan-mcp`.

### Can I get a free API key?

Yes, you can get a free API key without a credit card by using a specific curl command to register.