MCP.Market

Arcwall Security MCP server

by rom-baro·io.github.rom-baro/arcwall-security·v1.0.1·1 stars
No reviews yet

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

C69/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

1 stars45 downloads/wk

Reviews

Write one

Nobody has reviewed Arcwall Security yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Arcwall Security tools (7)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • arcwall_check_prompt

    Test a system prompt for injection vulnerabilities, jailbreak susceptibility, missing guardrails, and excessive agency. Include test messages to check multi-turn vulnerabilities.

  • arcwall_pre_commit

    Security check before committing. Scans staged files for secrets and checks MCP configs. Returns CLEAR TO COMMIT or BLOCKED with issues to fix.

  • arcwall_scan_agent_instructions

    Scan agent instruction files for security vulnerabilities. Covers CLAUDE.md, .cursorrules, .windsurfrules, AGENTS.md and other formats. Detects prompt injection, sensitive data, and missing guardrails.

  • arcwall_scan_dependencies

    Check dependencies for known CVEs. Scans package.json for vulnerable packages with safe version recommendations.

  • arcwall_scan_mcp

    Scan MCP server configurations for prompt injection, excessive permissions, and unverified server origins. Scans .cursor/mcp.json, .vscode/mcp.json, .claude/mcp.json and other MCP config files.

  • arcwall_scan_secrets

    Scan workspace for hardcoded API keys, passwords, private keys, tokens, and credentials. Run before committing or deploying.

  • arcwall_threat_model

    Generate a STRIDE threat model for the current codebase. Identifies trust boundary gaps, authorization issues, data flow exposures, and architectural risks. Results saved to Arcwall dashboard.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan21 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 144 days ago8/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Arcwall Security compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
69/100
higher than 33% of 915 Security servers
Tools
7
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 60% of 587 Security servers
Downloads a week
45
more than 38% of 248 Security servers with a package

What its tools let an agent do: 7 read

Install Arcwall Security in Claude Code, Cursor or VS Code

Runs npx -y @arcwall/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add arcwall-security -- npx -y @arcwall/mcp-server
Add to Cursor

What the publisher says

From the Arcwall Security repository's README, as published. We do not edit it. Read it on GitHub

@arcwall/mcp-server

Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

Setup

  1. Get your free API key at https://arcwall.io
  1. Add to your MCP config:

Claude Code (~/.claude/mcp.json):

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": ["@arcwall/mcp-server"],
      "env": { "ARCWALL_API_KEY": "your-key-here" }
    }
  }
}

Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.

  1. Restart your AI tool — Arcwall is ready.

Tools

  • arcwallscansecrets — hardcoded credentials
  • arcwallscanmcp — MCP config vulnerabilities
  • arcwallscanagent_instructions — CLAUDE.md, .cursorrules security
  • arcwallthreatmodel — STRIDE analysis
  • arcwallcheckprompt — prompt injection testing
  • arcwallprecommit — pre-commit security check
  • arcwallscandependencies — known CVEs in packages

Usage

Ask your AI assistant:

  • "Scan this repo for secrets"
  • "Check my MCP configs for vulnerabilities"
  • "Is my CLAUDE.md safe?"
  • "Generate a threat model for this project"
  • "Run a security check before I commit"
  • "Are there vulnerable packages in this project?"

Links

  • Website: https://arcwall.io
  • Dashboard: https://arcwall.io/app.html
  • Docs: https://arcwall.io/docs.html
  • GitHub: https://github.com/rom-baro/arcwall-mcp
  • Support: hello@arcwall.io

Nothing above is checked by us. What we check is on the safety report.

Arcwall Security: common questions

Is Arcwall Security MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the Arcwall Security safety report
How do I install Arcwall Security?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Arcwall Security need an API key?
Yes. The registry entry asks for ARCWALL_API_KEY.
Is Arcwall Security maintained?
The last commit was 181 days ago (2026-05-07). The latest release is v1.0.1.
What can I use instead of Arcwall Security?
Servers from other publishers that do the same job: Prodcheck MCP server, Zn Gate MCP server and Jikida MCP server.
How does Arcwall Security compare with other Security MCP servers?
safety score 69/100 (higher than 33% of 915 Security servers); tools 7 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Arcwall Security

Same job from other publishers: the closest match first, then the best rated.

  • Prodcheck
    4,685 pre-production checks: security, performance, scale, integrations, post-launch, people.
    A
  • Zn Gate
    The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
    B
  • Jikida
    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
    A
  • Skylos
    Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
    C
  • Wireshark
    Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
    A