{"_id":"@aiclude/security-scanner-mcp","_rev":"2-2c813ca7d5cc1cfe762478f6aedfa16f","name":"@aiclude/security-scanner-mcp","dist-tags":{"latest":"0.1.1"},"versions":{"0.1.1":{"name":"@aiclude/security-scanner-mcp","version":"0.1.1","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","_id":"@aiclude/security-scanner-mcp@0.1.1","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"homepage":"https://vs.aiclude.com","bugs":{"url":"https://github.com/aiclude/asvs/issues"},"bin":{"asvs-mcp":"dist/index.js","aiclude-security":"dist/index.js"},"dist":{"shasum":"bd6d57b758424dab8a491346da93f99ffbb606c9","tarball":"https://registry.npmjs.org/@aiclude/security-scanner-mcp/-/security-scanner-mcp-0.1.1.tgz","fileCount":5,"integrity":"sha512-wGAvBiGlkL3T0Q41x2bjjaHawrJfVzaboAr0hUiH8QeDrOu2SzH7YR39TD3eD0AafBYQFZhnwWf3HKEkrrx1Qw==","signatures":[{"sig":"MEYCIQDjzwUpvBfsOsKWNLGb/P3jzuXBpFZU2yB1n8sJz3+e3AIhAK6GbpGJHKUGjOPlu/lBWk9hfw2uaqtWxBRcB7gJuDXb","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46873},"main":"./dist/index.js","type":"module","_from":"file:aiclude-security-scanner-mcp-0.1.1.tgz","types":"./dist/index.d.ts","engines":{"node":">=20.0.0"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"dev":"tsup src/index.ts --format esm --dts --watch","test":"vitest run","build":"tsup src/index.ts --format esm --dts","clean":"rm -rf dist","start":"node dist/index.js"},"_npmUser":{"name":"aiclude","email":"admdev@aiclude.com"},"_resolved":"/tmp/b5bb89ec115e3c8d8de33ee6714abbb5/aiclude-security-scanner-mcp-0.1.1.tgz","_integrity":"sha512-wGAvBiGlkL3T0Q41x2bjjaHawrJfVzaboAr0hUiH8QeDrOu2SzH7YR39TD3eD0AafBYQFZhnwWf3HKEkrrx1Qw==","repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"_npmVersion":"10.8.2","description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","directories":{},"_nodeVersion":"20.20.0","dependencies":{"zod":"^3.25.0","@asvs/core":"0.1.0","@asvs/sandbox":"0.1.0","@asvs/reporter":"0.1.0","@modelcontextprotocol/sdk":"^1.0.0"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.0.0","typescript":"^5.5.0"},"_npmOperationalInternal":{"tmp":"tmp/security-scanner-mcp_0.1.1_1770964888156_0.7736454508872241","host":"s3://npm-registry-packages-npm-production"},"deprecated":"Use @aiclude/security-mcp instead"}},"time":{"created":"2026-02-13T06:41:28.044Z","modified":"2026-02-13T06:50:25.963Z","0.1.1":"2026-02-13T06:41:28.328Z"},"bugs":{"url":"https://github.com/aiclude/asvs/issues"},"author":{"name":"AICLUDE Inc.","email":"dev@aiclude.com"},"license":"MIT","homepage":"https://vs.aiclude.com","keywords":["mcp","mcp-server","security","vulnerability","scanner","ai-agent","claude","cursor","aiclude","sast","sca","malware","prompt-injection","tool-poisoning"],"repository":{"url":"git+https://github.com/aiclude/asvs.git","type":"git"},"description":"AIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Skills for security vulnerabilities","maintainers":[{"name":"aiclude","email":"admdev@aiclude.com"}],"readme":"# @aiclude/security-mcp\n\nAIclude Security Vulnerability Scanner - MCP Server for scanning MCP servers and Claude Code Skills for security vulnerabilities.\n\n## Features\n\n- **security_scan**: Search existing scan results by name, or trigger a new scan automatically\n- **scan_mcp_server**: Scan local MCP server source code for vulnerabilities\n- **scan_skill**: Scan local Claude Code Skill for vulnerabilities\n- **get_report** / **list_reports**: Retrieve and browse security scan reports\n- 7 parallel scan engines: SAST, SCA, Tool Analyzer, DAST, Permission Checker, Behavior Monitor, Malware Detector\n\n## Quick Install\n\n### Claude Desktop\n\nAdd to `claude_desktop_config.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"aiclude-security\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@aiclude/security-mcp\"]\n    }\n  }\n}\n```\n\n### Cursor\n\nAdd to `.cursor/mcp.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"aiclude-security\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@aiclude/security-mcp\"]\n    }\n  }\n}\n```\n\n## Usage\n\nOnce installed, ask your AI agent:\n\n- \"Check the security of @modelcontextprotocol/server-fetch\"\n- \"mcp-server-github 의 보안 취약점을 확인해줘\"\n- \"Scan ./my-mcp-server for security vulnerabilities\"\n\n## Tools\n\n| Tool | Description |\n|------|-------------|\n| `security_scan` | Search existing scan results by package name. Returns full report if found, or triggers new scan. |\n| `scan_mcp_server` | Scan local MCP server directory for vulnerabilities |\n| `scan_skill` | Scan local Claude Code Skill directory for vulnerabilities |\n| `get_report` | Retrieve a specific scan report by ID |\n| `list_reports` | List available scan reports with severity filtering |\n| `configure_scan` | View or update scan configuration |\n\n## Environment Variables\n\n| Variable | Description | Default |\n|----------|-------------|---------|\n| `ASVS_API_URL` | AIclude API server URL | `https://vs-api.aiclude.com` |\n| `ASVS_SIGNING_SECRET` | HMAC signing secret for API authentication | Built-in default |\n\n## Web Dashboard\n\nView all scan results at: https://vs.aiclude.com\n\n## License\n\nMIT - AICLUDE Inc.\n","readmeFilename":"README.md"}