Local-first MCP security scanner for AI-generated web apps.
Local-first MCP security scanner for AI-generated web apps.
If CodeInspectus is useful, star the repository so other AI-app builders can find it.
Once CodeInspectus is connected, these are the calls the assistant has available:
codeinspectus_scan — Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coveragecodeinspectus_rescan — Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coveragecodeinspectus_compliance_report — Per-framework code-level control coverage (not certification)codeinspectus_explain_finding — Deep explanation + full remediation for one findingcodeinspectus_generate_sbom — CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose)codeinspectus_list_rules — Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machinecodeinspectus_scan — Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations, framework tags, and three-state repository evidence for supcodeinspectus_rescan — Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage.codeinspectus_compliance_report — Per-framework code-level control coverage (not certification).codeinspectus_explain_finding — Deep explanation + full remediation for one finding.codeinspectus_generate_sbom — CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose).codeinspectus_list_rules — Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repair state.Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| codeinspectus_scan | Full local scan of a path (engines + AI checks). Returns CWE-keyed findings, detected technologies, exact native-pack and Pub dependency coverage, remediations, framework tags, and three-state repository evidence for sup |
| codeinspectus_rescan | Re-scan after fixes; diffs vs a prior scan → resolved / remaining / introduced, with fresh technology and pack coverage. |
| codeinspectus_compliance_report | Per-framework **code-level control coverage** (not certification). |
| codeinspectus_explain_finding | Deep explanation + full remediation for one finding. |
| codeinspectus_generate_sbom | CycloneDX/SPDX SBOM using Trivy plus native Pub inventory/fallback (written to the managed dir by default, or a path you choose). |
| codeinspectus_list_rules | Active detectors, native-pack inventory/rule ownership, engine versions, detection-DB + Trivy/Pub DB provenance and freshness, and structured machine setup/repair state. |
{
"mcpServers": {
"codeinspectus": { "command": "npx", "args": ["-y", "codeinspectus"] }
}
}Configuration as documented by the project. Restart the client after saving.
| Variable | Description | Required |
|---|---|---|
| SCAN_ID | Configuration value read at startup. | Optional |
| OLD_SCAN_ID | Configuration value read at startup. | Optional |
| NEW_SCAN_ID | Configuration value read at startup. | Optional |
Provides standardized access to Swiss court decisions via the entscheidsuche.ch API, enabling LLMs to search, retrieve, and analyze legal documents.
x402 payment safety for AI agents: counterparty risk gate, payment firewall, compliance, RWA gate.
Nonprofit compliance rules for all 50 US states, each with its official citation and status
A2A Governance Bridge MCP server. Tools: verify agent compliance, authorize a2a transaction,...
This MCP server gives Claude Code native access to: - Live drift scores across 11 major models (GPT-4o, Claude, Gemini, DeepSeek) - 9-score behavioral scorecards (drift, coherence, entropy…
View on ApifyForge | Use on Apify Store