Checks for committed [.env](/mcp/servers/integrations/dotenv) files or missing gitignore entries for .env.
Scans git history for secrets that were committed and later removed.
Detects hardcoded GitHub tokens and credentials.
Detects hardcoded OpenAI API keys in the source code.
Detects hardcoded Stripe API keys (excluding public keys like pk_*).
Detects hardcoded Supabase service-role keys (excluding anon keys).
Source for @opzyai/mcp — an
MCP server that scans the project in your workspace for
the mistakes that ship secrets and vulnerabilities to production, entirely on your
machine. Ask your agent "is this safe to ship?" and get a Launch Readiness score with
a fix for every finding.
Built by Opzyai — security for apps built with AI tools like Cursor, Lovable, v0 and Bolt.
# Claude Code
claude mcp add opzyai -- npx -y @opzyai/mcp// Cursor / generic MCP client
{
"mcpServers": {
"opzyai": { "command": "npx", "args": ["-y", "@opzyai/mcp"] }
}
}Related MCP server: CodeInspectus
One tool — security_check({ path?, offline? }) — runs four detectors:
Detector | Catches |
Working-tree secrets | API keys/tokens hardcoded in source (OpenAI, Anthropic, Stripe, Supabase service-role, AWS, GitHub, …) |
| env files committed or not gitignored |
Git-history secrets | credentials committed once and "removed" — still recoverable from history |
Dependency CVEs | known-vulnerable packages via OSV ( |
Detection is precision-first: an explicit allowlist keeps intentionally-public values
(Stripe pk_*, Supabase anon keys) from ever being flagged.
Everything runs locally over stdio. The only network call is the OSV dependency check —
package names + versions only, never your code — and offline: true disables even
that.
This is the public source mirror of the local scanner; it is developed inside the private Opzyai monorepo and synced here on each release, byte-identical.
packages/
mcp-local/ @opzyai/mcp — the MCP server published to npm
detectors/ @appsec/detectors — shared secret-detection patterns + allowlist
core/ @appsec/core — trimmed shim (shared types only; the full package is server-side)pnpm install
pnpm typecheck && pnpm test # vitest, all packages
pnpm build # tsup → packages/mcp-local/dist/cli.jsRequires Node >= 20 and git on PATH (for the git-history detector's tests).
Free URL scan (no account): paste your deployed URL at
opzyai.com/scan — passive check for
leaked client-bundle keys, exposed .env/.git/source maps, missing headers.
Hosted Pro MCP: deep scans of repos you own (dependency CVEs, SAST, git-history
secrets) plus propose_fix — the exact change for your agent to apply:
opzyai.com/mcp.
MIT © Opzyai
This server cannot be deployed
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.