almanax-security
Scan Git commits for security vulnerabilities using Almanax directly from Claude Code. The plugin connects to the Almanax MCP server to anal
Open source Repository Open in the app JSON README (API)
About
Scan Git commits for security vulnerabilities using Almanax directly from Claude Code. The plugin connects to the Almanax MCP server to analyze commit diffs, surface findings by severity, and help you fix issues — all without leaving your terminal. Includes guided setup and support for scanning individual commits or commit ranges.
Details
- Kind
- Plugins
- Topic
- Version control
- Publisher
- almanax-ai
- Origin
- marketplace
- Category
- ferramentas
- Stars
- 2
- Last push
- 2026-03-27T19:31:15Z
- Repository state
- ativo
- License
- Apache-2.0
- Added
- 2026-08-30 01:48:58
- Updated
- 2026-08-30 01:48:58
- Origin id
almanax-ai/almanax-security-plugin/almanax-security
README
# Almanax Security for Claude Code and Codex Use Almanax with Claude Code or Codex through the hosted MCP server at `https://mcp.almanax.ai`. ## Claude Code Set your Almanax API key before starting Claude Code: ```bash export ALMANAX_API_KEY="your_api_key_here" ``` Then install the marketplace and plugin: ```bash claude plugin marketplace add almanax-ai/almanax-security-plugin claude plugin install almanax-security@almanax ``` Restart Claude Code after installation. Before running your first scan, make sure the repository is available in Almanax. If needed, connect GitHub and link the repository in Almanax first. Then try: - `/almanax-security:setup` - `/almanax-security:scan-commit` ## Codex Codex uses MCP configuration plus skills. Set your Almanax API key: ```bash export ALMANAX_API_KEY="your_api_key_here" ``` Connect the hosted Almanax MCP server: ```bash codex mcp add --url https://mcp.almanax.ai --bearer-token-env-var ALMANAX_API_KEY almanax codex mcp list ``` Then install one or both skills: ```text $skill-installer install https://github.com/almanax-ai/almanax-security-plugin/tree/main/.agents/skills/almanax-setup $skill-installer install https://github.com/almanax-ai/almanax-security-plugin/tree/main/.agents/skills/almanax-scan-commit ``` If you prefer file-based Codex configuration, merge the example in `.agents/skills/almanax-setup/codex-config.example.toml` into either `~/.codex/config.toml` or a project-scoped `.codex/config.toml`. Before running your first scan, make sure the repository is available in Almanax. If needed, connect GitHub and link the repository in Almanax first. After setup, try prompts like: - `Use Almanax to get my recent security findings` - `Scan the current commit with Almanax and summarize the findings` ## Getting an API Key 1. Sign in to `https://app.almanax.ai`. 2. Open your organization settings. 3. Go to `Account` and create an API key in `API keys`. ## Privacy and Terms Using the hosted Almanax MCP server sends the information needed to fulfill your request to Almanax, which can include repository identifiers and commit diffs for scan workflows. - Privacy: `https://www.almanax.ai/privacy` - Terms: `https://www.almanax.ai/terms` ## Troubleshooting - If authentication fails, verify that `ALMANAX_API_KEY` is set in the shell that launched Claude Code or Codex. - If a scan says the repository is unavailable, connect GitHub or link the repository in Almanax first. For general product and integration documentation, see `https://docs.almanax.ai`.