MCP.Market

AI Scanner MCP server

by Aakashbhardwaj27·io.github.Aakashbhardwaj27/ai-scanner·v1.0.6·1 stars
No reviews yet

Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

1 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed AI Scanner yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AI Scanner tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • ai_inventory

    Get an inventory of all AI/LLM technologies used in a codebase — which SDKs are imported, which frameworks are integrated, which models are referenced, and which provider APIs are called. No secret detection, just awareness.

  • check_secrets

    Security check — scan a directory for exposed API tokens and hardcoded secrets only. Returns pass/fail with a list of any exposed credentials found. Use this before committing code or in CI pipelines.

  • scan_directory

    Scan a directory for LLM SDK usage, AI frameworks, exposed API tokens, and hardcoded secrets. Returns all findings grouped by type (token, secret, sdk, framework, endpoint, model) with file locations and severity levels.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 190 days ago4/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How AI Scanner compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 40% of 4,460 AI and agents servers
Tools
3
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 50% of 2,711 AI and agents servers
Downloads a week
44
more than 36% of 1,538 AI and agents servers with a package

What its tools let an agent do: 3 read

Install AI Scanner in Claude Code, Cursor or VS Code

Runs npx -y ai-scanner-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add ai-scanner -- npx -y ai-scanner-mcp
Add to Cursor

What the publisher says

From the AI Scanner repository's README, as published. We do not edit it. Read it on GitHub

ai-scanner-mcp

MCP server for ai-scanner - let AI agents scan codebases for LLM usage, AI frameworks, and exposed secrets.

An MCP server that exposes ai-scanner as tools for AI agents. Works with Claude Code, Claude Desktop, Cursor, Windsurf, and any MCP-compatible client.

Tools

Setup

Claude Code

claude mcp add ai-scanner npx ai-scanner-mcp

Claude Desktop

Add to your claudedesktopconfig.json:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Config file location:

  • macOS: ~/Library/Application Support/Claude/claudedesktopconfig.json
  • Windows: %APPDATA%\Claude\claudedesktopconfig.json

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Windsurf

Add to ~/.windsurf/mcp.json:

{
  "mcpServers": {
    "ai-scanner": {
      "command": "npx",
      "args": ["ai-scanner-mcp"]
    }
  }
}

Example Usage

Once connected, you can ask your AI agent:

  • "Scan this project for any exposed API keys"
  • "Check if there are any hardcoded secrets before I commit"
  • "What AI SDKs and frameworks does this codebase use?"
  • "Run a security scan on ./src and tell me if it's safe to push"
  • "Give me an AI inventory of this project"

Tool Details

scan_directory

Full scan with all detection categories. Parameters:

check_secrets

Security-focused pass/fail check. Parameters:

ai_inventory

AI stack awareness (no secret detection). Parameters:

Detection Coverage

  • AI Tokens (20+) — OpenAI, Anthropic, Google, AWS, HuggingFace, Groq, Replicate, and more
  • Generic Secrets (59) — Stripe, Twilio, GitHub, Slack, Discord, database URIs, private keys, JWTs
  • LLM SDKs (23) — OpenAI, Anthropic, Google Gemini, LiteLLM, AWS Bedrock, and more
  • AI Frameworks (24) — LangChain, LlamaIndex, CrewAI, AutoGen, DSPy, Vercel AI SDK, and more
  • 145 total detection patterns

License

MIT

Nothing above is checked by us. What we check is on the safety report.

AI Scanner: common questions

Is AI Scanner MCP server safe?
Mostly: it is graded B (72/100). Read the AI Scanner safety report
How do I install AI Scanner?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does AI Scanner need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is AI Scanner maintained?
The last commit was 228 days ago (2026-03-21). The latest release is v1.0.6.
What can I use instead of AI Scanner?
Servers from other publishers that do the same job: Agent Security Scanner MCP server, Commonly MCP server and mcptoon MCP server.
How does AI Scanner compare with other AI and agents MCP servers?
safety score 72/100 (higher than 40% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to AI Scanner

Same job from other publishers: the closest match first, then the best rated.

  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C
  • Commonly
    Read Commonly pods and post as a Commonly agent you create, with a token from your Commonly account.
    A
  • mcptoon
    MCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).
    A
  • llmtrim
    MCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.
    A
  • Agent Lsp
    Orchestrates language servers into 65 code-intelligence tools across 32 languages, token-optimized.
    A