F
licenseNot graded
qualityD
maintenanceLocal MCP server that scans code for security issues (secrets, dependencies, configurations, risky patterns) and integrates with GitHub Copilot in VS Code for automated pre-commit reviews.
-
secscan-mcp
by openjkai
Related Servers
Alternatives to secscan-mcp
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityBmaintenanceStandalone MCP server that provides security scanning, project mapping, and vulnerability fix generation to AI coding assistants.155 npm2MIT
- AlicenseAqualityDmaintenanceA security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.754 PyPI2MIT
- FlicenseNot gradedqualityDmaintenanceMCP server that scans project dependencies for security vulnerabilities (CVEs) and provides fix instructions directly in VS Code via Copilot.3-
- AlicenseNot gradedqualityCmaintenanceMCP server for ai-scanner that enables AI agents to scan codebases for LLM usage, AI frameworks, and exposed secrets.38 npm1MIT
Trustabl for Cursorofficial
FlicenseNot gradedqualityBmaintenanceMCP server that brings Trustabl static reliability scanning into Cursor, letting agents inventory agents/tools, flag risky patterns, score production readiness, and write SARIF reports.22-
TDQS
A4.2/5.0
Scored across 7 tools
Disambiguation5/5
Each tool has a clearly distinct purpose: scan_secrets, scan_code, scan_dependencies, and scan_iac target different security domains; scan_all is a meta-runner; list_available_scanners and explain_finding serve informational and post-scan roles. No overlap or ambiguity.
Naming Consistency5/5
All tool names follow a consistent verb_noun pattern with a logical prefix: scan_ for scanning actions, list_ for listing, and explain_ for explanation. The naming is predictable and coherent.
Tool Count5/5
Seven tools is an ideal scope for a security scanning MCP server. It covers the major scan types plus utilities for listing available scanners and explaining findings, without unnecessary bloat or missing essentials.
Completeness5/5
The tool set covers the full lifecycle of security scanning: pre-scan discovery (list_available_scanners), individual scans for all major domains (secrets, code, dependencies, IaC), a combined scan (scan_all), and post-scan remediation (explain_finding). No obvious gaps for typical use cases.
Maintenance
ActivitySlowing
ResponsivenessNo issues