{"_id":"@aiclude/security-mcp","_rev":"6-d0399a6520557804a8406a10caff34ed","name":"@aiclude/security-mcp","dist-tags":{"latest":"3.0.0"},"versions":{"0.1.0":{"name":"@aiclude/security-mcp","version":"0.1.0","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","_id":"@aiclude/security-mcp@0.1.0","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"452be4439fc1efaacddb2abbd6508e3f099b7063","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-0.1.0.tgz","fileCount":5,"integrity":"sha512-lMIxRlDl7pn/+Rw8q6SDhnF8ho9D6H6cMO7mbksnI+mhHYrLyS0i/RxNA03q2gJmSJmPQUMoeynBQkoKoXd1FQ==","signatures":[{"sig":"MEUCIQC3PxZo0f7P7ESJJfYqWLZEZfkwnhPbdy3VvOy6vIwoKQIgM9+Zf/fS+ZN75a3y/hpZqv7KHimGqpfAUUZ6zrv+RAk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46865},"main":"./dist/index.js","type":"module","_from":"file:aiclude-security-mcp-0.1.0.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"_resolved":"/tmp/a235ebbfacce7ac8fc69c923b9689062/aiclude-security-mcp-0.1.0.tgz","_integrity":"sha512-lMIxRlDl7pn/+Rw8q6SDhnF8ho9D6H6cMO7mbksnI+mhHYrLyS0i/RxNA03q2gJmSJmPQUMoeynBQkoKoXd1FQ==","repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"0.1.0","@asvs/sandbox":"0.1.0","@asvs/reporter":"0.1.0","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-mcp_0.1.0_1770964664459_0.5332900105048732","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@aiclude/security-mcp","version":"0.1.1","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","_id":"@aiclude/security-mcp@0.1.1","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"5db7b4c61f6a64bef143cd989e14d309a74cbe60","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-0.1.1.tgz","fileCount":5,"integrity":"sha512-SRoneHfi//DDotqVKq7DAxAQgpmgJaEBII2mrQ6G5wmUA0hecewDgf2hLDIXjNvRgjZ4pFaZcIJJ3aofanQNOA==","signatures":[{"sig":"MEYCIQCfM+x2UW84JOJu1bxyU21B+vlIugk9oCNp6K5Aez7K9gIhAI8Ivs3KizxMbwhwOnBnoKjpjuZhESUr64WvG8p1/aOh","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46865},"main":"./dist/index.js","type":"module","_from":"file:aiclude-security-mcp-0.1.1.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"_resolved":"/tmp/61afb000262153a159fea7c18d75ad79/aiclude-security-mcp-0.1.1.tgz","_integrity":"sha512-SRoneHfi//DDotqVKq7DAxAQgpmgJaEBII2mrQ6G5wmUA0hecewDgf2hLDIXjNvRgjZ4pFaZcIJJ3aofanQNOA==","repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"0.1.0","@asvs/sandbox":"0.1.0","@asvs/reporter":"0.1.0","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-mcp_0.1.1_1770964842372_0.002358370980397373","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@aiclude/security-mcp","version":"1.0.0","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","_id":"@aiclude/security-mcp@1.0.0","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"2173757dfca7beea14f6f3e7129d11f72d745711","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-1.0.0.tgz","fileCount":5,"integrity":"sha512-xdCQLMXhsz2ugsmWtEU0DkTUlKeJqkc3rsQoYOeoiBO9fL8T50VeuHwwJXUodhVJoQHHpDuMPeZpa4xyZ9wFqQ==","signatures":[{"sig":"MEUCIF/bRBWc/gGVb9qgmRv/uYQjCgaGwUmXJcgaecN9SSbFAiEA7U+mHNJ0D5ohnrGACCH0iavnS+r394L0YN5zu73SxKI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46865},"main":"./dist/index.js","type":"module","_from":"file:aiclude-security-mcp-1.0.0.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"_resolved":"/tmp/876cfb24060bd9d3c5d532c24dd88441/aiclude-security-mcp-1.0.0.tgz","_integrity":"sha512-xdCQLMXhsz2ugsmWtEU0DkTUlKeJqkc3rsQoYOeoiBO9fL8T50VeuHwwJXUodhVJoQHHpDuMPeZpa4xyZ9wFqQ==","repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"0.1.0","@asvs/sandbox":"0.1.0","@asvs/reporter":"0.1.0","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-mcp_1.0.0_1770966143603_0.43330365367632795","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@aiclude/security-mcp","version":"1.1.0","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","_id":"@aiclude/security-mcp@1.1.0","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"89b4b5846ad775f0442156d4c21f81d5576a5452","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-1.1.0.tgz","fileCount":5,"integrity":"sha512-cwHUxGxzB+AaUj2wIKJeYWqPnsYmWl3n+kgp1wFYlz6nmLihu21dmEFhWScI+TGFPj2EQxy+Ek9hY1hPUTuo2A==","signatures":[{"sig":"MEYCIQCtsjaZslwZv2VY53CbrqTFEXLamHzXgtSoWT6rJYxI3AIhANt1HG1mvMts5a2o0RehmkrHFY9r99Srco4kDrLhWFyX","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46976},"main":"./dist/index.js","type":"module","_from":"file:aiclude-security-mcp-1.1.0.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"_resolved":"/tmp/a9b4dbe93adaa2be76e1996a30191372/aiclude-security-mcp-1.1.0.tgz","_integrity":"sha512-cwHUxGxzB+AaUj2wIKJeYWqPnsYmWl3n+kgp1wFYlz6nmLihu21dmEFhWScI+TGFPj2EQxy+Ek9hY1hPUTuo2A==","repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"0.1.0","@asvs/sandbox":"0.1.0","@asvs/reporter":"0.1.0","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-mcp_1.1.0_1770966979924_0.6943888315751126","host":"s3://npm-registry-packages-npm-production"}},"2.1.1":{"name":"@aiclude/security-mcp","version":"2.1.1","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"Apache-2.0","_id":"@aiclude/security-mcp@2.1.1","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"7771a2bc5d15fc23b6a7c4827342d3cddabf35bf","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-2.1.1.tgz","fileCount":4,"integrity":"sha512-hh71l0HjF9uMAUkqlRhiFbECzcGx+j/RA9ldC6ddq50Afu4zPRPxlqv2NLeAb3s2Lgx9YFJlHt9B2kn4Zi0RkQ==","signatures":[{"sig":"MEQCIG1l4LWBhl4Hg82UIBnD4I1L9ImpM0JJQyqds9jTUe/SAiBAij4cIBfJ3QIbPWheWSPkrjEu3JaqN0/Ox++ZrfHJuQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":35734},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"gitHead":"4a2f916dfdabbdae6dff5e25c72774cf30aa3083","scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js","prepublishOnly":"npm run build"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AICLUDE Security Vulnerability Scanner - MCP Server for querying vulnerability scan results","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"workspace:*","@asvs/sandbox":"workspace:*","@asvs/reporter":"workspace:*","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-mcp_2.1.1_1771348143780_0.5543378043396348","host":"s3://npm-registry-packages-npm-production"}},"3.0.0":{"name":"@aiclude/security-mcp","version":"3.0.0","description":"AICLUDE Security Vulnerability Scanner - MCP Server for querying vulnerability scan results","type":"module","main":"./dist/index.js","types":"./dist/index.d.ts","bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"exports":{".":{"import":"./dist/index.js","types":"./dist/index.d.ts"}},"keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"license":"Apache-2.0","author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"repository":{"type":"git","url":"git+https://github.com/aiclude/asvs.git"},"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"engines":{"node":">=20.0.0"},"publishConfig":{"access":"public"},"scripts":{"build":"tsup src/index.ts --format esm --dts","dev":"tsup src/index.ts --format esm --dts --watch","start":"node dist/index.js","test":"vitest run","clean":"rm -rf dist","prepublishOnly":"npm run build"},"dependencies":{"@modelcontextprotocol/sdk":"^1.0.0","zod":"^3.25.0"},"devDependencies":{"@types/node":"^25.2.3","tsup":"^8.0.0","typescript":"^5.5.0","vitest":"^4.0.18"},"_id":"@aiclude/security-mcp@3.0.0","gitHead":"4a2f916dfdabbdae6dff5e25c72774cf30aa3083","_nodeVersion":"20.20.0","_npmVersion":"10.8.2","dist":{"integrity":"sha512-eeSsfsxQpm2DKmaV/g/9rsDVAONduSzc3Rf+iuGIwnzLvGlfRdjl3d9kOy0jM0cUHjMywi1Gig1H7BTmJG+Ntw==","shasum":"8efd1be6692a5ddf4bc0a5e7872a7b9928c12847","tarball":"https://registry.npmjs.org/@aiclude/security-mcp/-/security-mcp-3.0.0.tgz","fileCount":4,"unpackedSize":18388,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIGic0v1+fG1rnxBRfvriQ2KIoGQ59bLX47W3cfA6omnpAiB5tKlKJlPo+VFYZH0AbKhCrdRVr9by1iYbwokpdJjjJw=="}]},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"directories":{},"maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/security-mcp_3.0.0_1771365357453_0.64940866851166"},"_hasShrinkwrap":false}},"time":{"created":"2026-02-13T06:37:44.400Z","modified":"2026-02-17T21:55:57.735Z","0.1.0":"2026-02-13T06:37:44.610Z","0.1.1":"2026-02-13T06:40:42.496Z","1.0.0":"2026-02-13T07:02:23.766Z","1.1.0":"2026-02-13T07:16:20.061Z","2.1.1":"2026-02-17T17:09:03.972Z","3.0.0":"2026-02-17T21:55:57.617Z"},"bugs":{"url":"https://github.com/aiclude/asvs/issues"},"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"Apache-2.0","homepage":"https://vs.aiclude.com","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"repository":{"type":"git","url":"git+https://github.com/aiclude/asvs.git"},"description":"AICLUDE Security Vulnerability Scanner - MCP Server for querying vulnerability scan results","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"readme":"# @aiclude/security-mcp\n\nAICLUDE Security Vulnerability Scanner — MCP Server for querying vulnerability scan results of MCP Servers and AI Agent Skills.\n\n## Quick Install\n\n### Claude Desktop\n\nAdd to `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"aiclude-security\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@aiclude/security-mcp\"]\n    }\n  }\n}\n```\n\n### Cursor\n\nAdd to `.cursor/mcp.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"aiclude-security\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@aiclude/security-mcp\"]\n    }\n  }\n}\n```\n\n## Usage\n\nOnce installed, ask your AI agent:\n\n- \"Check the security of @modelcontextprotocol/server-fetch\"\n- \"Is my-awesome-skill safe to use?\"\n- \"Show me the vulnerability report for mcp-server-github\"\n\n## Tools\n\n| Tool | Description |\n|------|-------------|\n| `security_scan` | Search scan results by package name. Returns report if found, or registers target for scanning. |\n| `get_report` | Retrieve a specific scan report by ID |\n| `list_reports` | List available scan reports with severity filtering |\n\n## How It Works\n\n1. Sends the package name to the AICLUDE scan API\n2. If a scan report exists, returns it immediately\n3. If not, registers the target for server-side scanning\n4. Results are viewable at https://vs.aiclude.com\n\nOnly the package name and type are sent. No source code or credentials are transmitted.\n\n## Server-Side Scan Engines\n\nThe AICLUDE server runs 7 engines on registered targets:\n\n| Engine | What It Detects |\n|--------|----------------|\n| SAST | Code vulnerabilities via pattern matching |\n| SCA | Known CVEs in dependencies (OSV.dev) |\n| Tool Analyzer | MCP tool poisoning, shadowing, rug-pull |\n| DAST | SQL/Command/XSS injection via fuzzing |\n| Permission Checker | Excessive filesystem/network/process access |\n| Behavior Monitor | Suspicious runtime behavior patterns |\n| Malware Detector | Backdoors, cryptominers, ransomware, data stealers |\n\n## Related\n\n- [`@aiclude/security-skill`](https://www.npmjs.com/package/@aiclude/security-skill) — Claude Code Skill\n- [vs.aiclude.com](https://vs.aiclude.com) — Web dashboard\n\n## License\n\nApache 2.0 — [AICLUDE Inc.](https://aiclude.com)\n","readmeFilename":"README.md"}