io.github.rom-baro/arcwall-security
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Open source Open in the app JSON README (API)
About
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Details
- Kind
- MCP servers
- Topic
- Security & identity
- Publisher
- rom-baro
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 1.0.1
- Stars
- 1
- Last push
- 2026-05-07T02:10:44Z
- Repository state
- ativo
- Language
- TypeScript
- Added
- 2026-08-29 04:01:19
- Updated
- 2026-08-29 04:01:19
- Origin id
io.github.rom-baro/arcwall-security
README
# @arcwall/mcp-server
Security scanning for Claude Code, Cursor, Windsurf,
and any MCP-compatible AI coding tool.
## Setup
1. Get your free API key at https://arcwall.io
2. Add to your MCP config:
Claude Code (~/.claude/mcp.json):
```json
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
```
Cursor (.cursor/mcp.json): Same config.
Windsurf: Add via MCP settings panel.
3. Restart your AI tool — Arcwall is ready.
## Tools
- `arcwall_scan_secrets` — hardcoded credentials
- `arcwall_scan_mcp` — MCP config vulnerabilities
- `arcwall_scan_agent_instructions` — CLAUDE.md, .cursorrules security
- `arcwall_threat_model` — STRIDE analysis
- `arcwall_check_prompt` — prompt injection testing
- `arcwall_pre_commit` — pre-commit security check
- `arcwall_scan_dependencies` — known CVEs in packages
## Usage
Ask your AI assistant:
- "Scan this repo for secrets"
- "Check my MCP configs for vulnerabilities"
- "Is my CLAUDE.md safe?"
- "Generate a threat model for this project"
- "Run a security check before I commit"
- "Are there vulnerable packages in this project?"
## Links
- Website: https://arcwall.io
- Dashboard: https://arcwall.io/app.html
- Docs: https://arcwall.io/docs.html
- GitHub: https://github.com/rom-baro/arcwall-mcp
- Support: hello@arcwall.io