Arcwall-security MCP Server

Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

Local serverstdioMIT

What is the Arcwall-security MCP Server?

Arcwall Security is an MCP project maintained in the rom-baro/arcwall-mcp repository. The maintainer describes its purpose as “Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool”. Read the project documentation for the complete scope.

Installation

The documented npm package is @arcwall/mcp-server. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.

Configuration values

The example declares ARCWALL_API_KEY. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
arcwall_scan_secrets	hardcoded credentials
arcwall_scan_mcp	MCP config vulnerabilities
arcwall_scan_agent_instructions	CLAUDE.md, .cursorrules security
arcwall_threat_model	STRIDE analysis
arcwall_check_prompt	prompt injection testing
arcwall_pre_commit	pre-commit security check
arcwall_scan_dependencies	known CVEs in packages

How to install the Arcwall-security MCP Server

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": [
        "@arcwall/mcp-server"
      ],
      "env": {
        "ARCWALL_API_KEY": "YOUR_ARCWALL_API_KEY"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.