This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
CodeGuard MCP是一款实时AI代码安全扫描工具，用于检测AI生成代码中的漏洞、密钥和合规性问题，适用于开发环境中的代码安全审查。 CodeGuard MCP is a real-time AI code security scanning tool used to detect vulnerabilities, keys, and compliance issues in AI-generated code, and is suitable for code security reviews in development environments## 工具列表 Tool List
本MCP服务封装下列工具，可让模型通过标准化接口调用以下功能。 本MCP服务封装下列工具，可让模型通过标准化接口调用以下功能。
工具 Tool | 描述 Description |
scanCode | Scan code for security vulnerabilities, secrets, and compliance issues |
scanVulnerabilities | Quick scan for code vulnerabilities only |
detectSecrets | Detect exposed secrets, API keys, and credentials |
suggestSecureFix | Generate secure code fixes for vulnerabilities |
checkCompliance | Check code for regulatory compliance (GDPR, HIPAA, SOC2, PCI DSS) |
工具在线测试： https://mcp.xiaobenyang.com/inspector/1777316659447811
Online Tool test https://mcp.xiaobenyang.com/inspector/1777316659447811
Related MCP server: frogeye-mcp
如何获取 XBY-APIKEY ？ How to get XBY-APIKEY ?
访问小笨羊科技网站 https://xiaobenyang.com，注册用户即可获得APIKEY Visit XiaoBenYang website https://xiaobenyang.com, register and get the APIKEY.
{
"mcpServers": {
"代码安全扫描工具": {
"headers": {
"XBY-APIKEY": "<YOUR_XBY_APIKEY>"
},
"type": "sse",
"url": "https://mcp.xiaobenyang.com/1777316659447811/sse"
}
}
}{
"mcpServers": {
"代码安全扫描工具": {
"headers": {
"XBY-APIKEY": "<YOUR_XBY_APIKEY>"
},
"type": "streamable_http",
"url": "https://mcp.xiaobenyang.com/1777316659447811/mcp"
}
}
}{
"mcpServers": {
"代码安全扫描工具": {
"command": "npx",
"args": [
"-y",
"xiaobenyang-mcp"
],
"env": {
"XBY_APIKEY": "<YOUR_XBY_APIKEY>",
"mcpId": "1777316659447811",
},
"transport": "stdio"
}
}
}
This server cannot be deployed
Zero-config MCP security scanner for AI-generated apps. 25K+ vulnerability patterns.
Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
