Sekrd Security Scanner
OfficialProvides security scanning capabilities to detect exposed Stripe API keys and secrets (such as live secret keys) in client bundles and application code.
Provides security scanning capabilities to detect Supabase-specific misconfigurations, including insecure Row Level Security (RLS) policies and authentication issues.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Sekrd Security Scannerscan https://my-app.vercel.app for security issues"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@sekrd/mcp-server
MCP server for Sekrd — deep security audit for AI-built apps. Run security scans directly from Cursor, Claude Code, and other AI IDEs.
Quick Start
npx -y @sekrd/mcp-serverSetup
Claude Code
claude mcp add sekrd -- npx -y @sekrd/mcp-serverWith API key (paid plans, unlimited scans):
claude mcp add sekrd -e SEKRD_API_KEY=your_key -- npx -y @sekrd/mcp-serverCursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"sekrd": {
"command": "npx",
"args": ["-y", "@sekrd/mcp-server"],
"env": {
"SEKRD_API_KEY": "your_key_here"
}
}
}
}Claude Desktop
Add to claude_desktop_config.json:
{
"mcpServers": {
"sekrd": {
"command": "npx",
"args": ["-y", "@sekrd/mcp-server"],
"env": {
"SEKRD_API_KEY": "your_key_here"
}
}
}
}API Key
Without key: 10 free scans per month (IP rate limit)
With key: Unlimited scans on Scan ($9 one-time) or Pro ($29/mo) plans
Get your key at sekrd.com/dashboard/settings.
Tools
Tool | Description |
| Full security scan. Returns score, verdict (SHIP/BLOCK), findings + fix prompts. |
| Get results of a previous scan. |
| Get only findings with fix prompts for your IDE. |
Example
You: Scan https://my-app.vercel.app for security issues
Sekrd: Score 34/100 — BLOCK
3 critical, 5 high, 2 medium findings
1. [CRITICAL] Stripe live secret key exposed in client bundle
Fix: Move 'sk_live_...' to .env file and use NEXT_PUBLIC_ prefix only for public keys
2. [CRITICAL] Supabase RLS policy USING(true) on users table
Fix: Replace with USING(auth.uid() = user_id)License
MIT
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Tools
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sekrdcom/sekrd-mcp-ts'
If you have feedback or need assistance with the MCP directory API, please join our Discord server