Aigently MCP Server

Open-souSecurely feeds real security refreshed rules into Cursor, Claude Code, and Windsurf — zero config, no API key.

Local serverstdioPython

What is the Aigently MCP Server?

Open-souSecurely feeds real security refreshed rules into Cursor, Claude Code, and Windsurf — zero config, no API key.

What you get

The open-source CVE catalog, pipeline, and MCP server behind aigent.ly. Every day, CI ingests fresh CVEs from six public threat sources, enriches them with AI-generated coding patterns, and commits ready-to-use security rules directly into this repo — formatted for Cursor, Claude Code, Windsurf, GitHub Copilot, and Cline.

  • AI assistants don't know which CVEs landed last week
  • SAST catches issues at audit time. Aigent.ly catches them at generation time
  • Free, open data. Private, paid product. The security boundary is by design

Configuration and credentials

  • Node.js 22+ - Docker (for local Postgres) - Anthropic API key (AI pipeline steps only) ---

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
get_security_contextDetect your stack and return relevant rules and top CVEs
compose_guardrailGenerate an IDE-ready rules file for your stack
search_threatsFull-text and faceted CVE search; ranks by KEV → severity → EPSS
get_threatFull CVE detail with AI-generated safe-code patterns
detect_project_stackIdentify stack(s) from a file list
list_stacksEnumerate all 12 supported stacks
get_manifestCatalog version + counts

How to install the Aigently MCP Server

{
  "mcpServers": {
    "aigently": {
      "command": "npx",
      "args": [
        "-y",
        "@aigently/mcp-server@latest"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  • Node.js 22+ - Docker (for local Postgres) - Anthropic API key (AI pipeline steps only) ---

Example prompts to try

  • “Use Aigently to get security context.”
  • “Use Aigently to compose guardrail.”
  • “Use Aigently to search threats.”

Frequently asked questions

Open-souSecurely feeds real security refreshed rules into Cursor, Claude Code, and Windsurf — zero config, no API key. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.