Server data from the Official MCP Registry
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
About
Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.
Security Report
Arcwall is a security scanning MCP server with reasonable authentication (API key required) and appropriate tool design. However, the codebase has several concerning patterns: the API key is transmitted in plaintext HTTP headers, workspace scanning functions use broad filesystem access with limited validation, the `preCommitHandler` executes git commands via shell, and there is no input validation on critical parameters like file paths. While the server's purpose (security scanning) justifies network and filesystem access, the implementation has vulnerabilities that could allow path traversal, command injection, or credential exposure. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
What You'll Need
Set these up before or after installing:
Environment variable: ARCWALL_API_KEY
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-rom-baro-arcwall-security": {
"env": {
"ARCWALL_API_KEY": "your-arcwall-api-key-here"
},
"args": [
"-y",
"@arcwall/mcp-server"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
@arcwall/mcp-server
Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
Setup
-
Get your free API key at https://arcwall.io
-
Add to your MCP config:
Claude Code (~/.claude/mcp.json):
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.
- Restart your AI tool — Arcwall is ready.
Tools
arcwall_scan_secrets— hardcoded credentialsarcwall_scan_mcp— MCP config vulnerabilitiesarcwall_scan_agent_instructions— CLAUDE.md, .cursorrules securityarcwall_threat_model— STRIDE analysisarcwall_check_prompt— prompt injection testingarcwall_pre_commit— pre-commit security checkarcwall_scan_dependencies— known CVEs in packages
Usage
Ask your AI assistant:
- "Scan this repo for secrets"
- "Check my MCP configs for vulnerabilities"
- "Is my CLAUDE.md safe?"
- "Generate a threat model for this project"
- "Run a security check before I commit"
- "Are there vulnerable packages in this project?"
Links
- Website: https://arcwall.io
- Dashboard: https://arcwall.io/app.html
- Docs: https://arcwall.io/docs.html
- GitHub: https://github.com/rom-baro/arcwall-mcp
- Support: hello@arcwall.io
Reviews
No reviews yet
Be the first to review this server!
More Security MCP Servers
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
Google Workspace MCP
Freeby Taylorwilsdon · Productivity
Control Gmail, Calendar, Docs, Sheets, Drive, and more from your AI