code-scanner-mcp MCP Server

Scan your local codebase for security vulnerabilities, hardcoded secrets, and insecure coding patterns — all from your AI assistant via MCP (Model Context Protocol).

Local serverstdio

What is the code-scanner-mcp Server?

code-scanner-mcp is an MCP project maintained in the 214070779/code-scanner-mcp repository. The maintainer describes its purpose as “Scan your local codebase for security vulnerabilities, hardcoded secrets, and insecure coding patterns — all from your AI assistant via MCP (Model Context Protocol)”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using python3. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
scan_secrets	Scan for hardcoded API keys, tokens, and passwords
scan_dependencies	Check dependencies against known vulnerability database
scan_code_patterns	Detect SQLi, XSS, command injection, and other patterns
scan_file	Comprehensive scan of a single file (secrets + code patterns)
scan_directory	Full project audit (secrets + dependencies + code patterns)

How to install the code-scanner-mcp Server

{
  "mcpServers": {
    "code-scanner": {
      "command": "python3",
      "args": [
        "/path/to/code-scanner-mcp/server.py"
      ]
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.