{"name":"com.securealy/mcp","slug":"securealy-mcp","title":"Securealy","description":"Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.","url":"https://mcp.market/server/securealy-mcp","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"ecommerce","tags":["ecommerce","data","devtools","security"],"presence":{"score":18,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-10-14T05:19:59.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/securealy/securealy","website":"https://securealy.com","version":"0.1.6","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"securealy-mcp","version":"0.1.6","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Optional. Your Supabase project URL, read by check_rls. Sent only to that project.","format":"string","name":"SUPABASE_URL"},{"description":"Optional. Service role key for check_rls. Sent only to your Supabase project, never printed.","format":"string","isSecret":true,"name":"SUPABASE_SERVICE_KEY"},{"description":"Optional. Supabase management token for check_rls and the auth config check. Sent only to the Supabase management API.","format":"string","isSecret":true,"name":"SUPABASE_MGMT_TOKEN"},{"description":"Optional. Supabase project ref, used with SUPABASE_MGMT_TOKEN.","format":"string","name":"SUPABASE_PROJECT_REF"},{"description":"Optional. Stripe secret key for check_stripe. Sent only to api.stripe.com, never printed.","format":"string","isSecret":true,"name":"STRIPE_SECRET_KEY"},{"description":"Optional. Project-scoped Vercel token for check_vercel_env. Sent only to api.vercel.com, never printed.","format":"string","isSecret":true,"name":"VERCEL_TOKEN"},{"description":"Optional. Vercel project id for check_vercel_env.","format":"string","name":"VERCEL_PROJECT_ID"},{"description":"Optional. Set to 1 to let check_vercel_env fetch decrypted variable values from api.vercel.com for the trailing-newline and live-key checks. Without it only names and targets are read and those checks are reported as skipped.","format":"string","name":"SECUREALY_VERCEL_DECRYPT"},{"description":"Optional. Set to 1 to let check_rls send the service key to a self-hosted Supabase URL. Without it the key is sent only to an https URL on a Supabase-hosted domain.","format":"string","name":"SECUREALY_SUPABASE_HOST_OVERRIDE"},{"description":"Optional. Folders, separated by the OS path delimiter, that scan_repo may read in addition to the server's working directory. Anything outside is refused.","format":"string","name":"SECUREALY_SCAN_ROOTS"},{"description":"Optional. Set to 1 to stop the server appending each run (grade, score, counts, failing check ids; never evidence) to .securealy/history.json in its working directory.","format":"string","name":"SECUREALY_NO_HISTORY"},{"description":"Optional, off by default. Set to 1 to send an anonymous aggregate of each run (command, grade, counts, stack kind, failing check ids; no URL, host or evidence) to securealy.com.","format":"string","name":"SECUREALY_TELEMETRY"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}