@arcwall/mcp-server

Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

Setup

1. Get your free API key at https://arcwall.io

2. Add to your MCP config:

Claude Code (~/.claude/mcp.json):

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": ["@arcwall/mcp-server"],
      "env": { "ARCWALL_API_KEY": "your-key-here" }
    }
  }
}

Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.

3. Restart your AI tool — Arcwall is ready.

Related MCP server: mycop

Tools

• arcwall_scan_secrets — hardcoded credentials

• arcwall_scan_mcp — MCP config vulnerabilities

• arcwall_scan_agent_instructions — CLAUDE.md, .cursorrules security

• arcwall_threat_model — STRIDE analysis

• arcwall_check_prompt — prompt injection testing

• arcwall_pre_commit — pre-commit security check

• arcwall_scan_dependencies — known CVEs in packages

Usage

Ask your AI assistant:

• "Scan this repo for secrets"

• "Check my MCP configs for vulnerabilities"

• "Is my CLAUDE.md safe?"

• "Generate a threat model for this project"

• "Run a security check before I commit"

• "Are there vulnerable packages in this project?"

Links

• Website: https://arcwall.io

• Dashboard: https://arcwall.io/app.html

• Docs: https://arcwall.io/docs.html

• GitHub: https://github.com/rom-baro/arcwall-mcp

• Support: hello@arcwall.io