Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add --transport sse security-vulnerability-auditor https://neoninnovationlab.com/api/mcp-security~/.codex/config.toml
# Codex has no SSE transport: bridged through mcp-remote
[mcp_servers.security-vulnerability-auditor]
command = "npx"
args = ["-y", "mcp-remote", "https://neoninnovationlab.com/api/mcp-security"]~/.cursor/mcp.json
{
"mcpServers": {
"security-vulnerability-auditor": {
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}.vscode/mcp.json
{
"servers": {
"security-vulnerability-auditor": {
"type": "sse",
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"security-vulnerability-auditor": {
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"security-vulnerability-auditor": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://neoninnovationlab.com/api/mcp-security"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"security-vulnerability-auditor": {
"url": "https://neoninnovationlab.com/api/mcp-security"
}
}
}