SecureCode

Instructions

Implementation Reference

• src/index.ts:2123-2181 (handler)

  The security-check tool implementation in src/index.ts. It performs security checks on the local project (e.g., checking for .securecoderc, .gitignore rules, and Claude denylist entries) and suggests actions to secure secret management.

          '  SECURECODE_ENV=<environment>',
          '  And add .securecoderc to .gitignore.',
          '',
          '**"Secret not found":**',
          'Use list-secrets to see available names. Check if you\'re using the right tags.',
          '',
          '**"MCP Rule blocked":**',
          'Use get-active-rules to see which rule is blocking. Modify rules from the dashboard.',
          '',
          '**"Session sleeping":**',
          'Run wake-session to unlock access.',
          '',
          '**Outdated MCP server:**',
          'Close and reopen Claude Code. If issue persists: npx clear-npx-cache',
          'Then close and reopen Claude Code again.',
          '',
          '**Adding production/staging environments:**',
          'To add secrets for a new environment, use: onboard(action: "add-environment")',
          'For production deployments, set SECURECODE_PROJECT and SECURECODE_ENV as env vars',
          'in your hosting platform (Vercel, Railway, etc.).',
          '',
          '**Need help?**',
          'Visit securecodehq.com or check the dashboard for documentation.',
        ].join('\n'),
      };
  
      if (t === 'all') {
        const allText = [sections.tools, sections.sdk, sections.sessions, sections.rules, sections['import-export'], sections.troubleshooting].join('\n\n---\n\n');
        return wrapResponse([{ type: 'text', text: `# SecureCode Help\n\n${allText}` }]);
      }
  
      const section = sections[t];
      if (!section) {
        return wrapResponse([{ type: 'text', text: `Unknown topic: ${t}. Available: tools, sdk, sessions, rules, import-export, troubleshooting` }], true);
      }
  
      return wrapResponse([{ type: 'text', text: section }]);
    },
  );
  
  async function main() {
    const transport = new StdioServerTransport();
    await server.connect(transport);
  }
  
  main().catch(console.error);