Security Scanner MCP - Detect vulnerabilities, hardcoded secrets, SQL injection, XSS, and OWASP Top 10 issues. Works with Claude Code, Cursor, Windsurf, Roo Code, and any MCP-compatible editor.
npm install @j0kz/security-scanner-mcp> Scan for vulnerabilities, OWASP issues, and security best practices



- š Security Hardening: Enhanced vulnerability detection and OWASP compliance checks
- š Comprehensive Examples: New example files in examples/security-scanner/
- šÆ Better Error Messages: Improved validation and error handling
- ā
Production Ready: Enhanced secrets detection and dependency scanning
Get the complete suite with ONE command:
Claude Code:
``bashMac/Linux
curl -fsSL https://raw.githubusercontent.com/j0kz/mcp-agents/main/install-all.sh | bash
Cursor/Windsurf:
`bash
Download complete config
curl -o ~/.cursor/mcp_config.json https://raw.githubusercontent.com/j0kz/mcp-agents/main/mcp_config_all.jsonOr for Windsurf
curl -o ~/.windsurf/mcp_config.json https://raw.githubusercontent.com/j0kz/mcp-agents/main/mcp_config_all.json
`$3
Claude Code:
`bash
claude mcp add security-scanner "npx @j0kz/security-scanner-mcp" --scope user
`Cursor/Windsurf: Add to
mcp_config.json:`json
{
"mcpServers": {
"security-scanner": {
"command": "npx",
"args": ["@j0kz/security-scanner-mcp"]
}
}
}
`$3
After setup, just chat naturally with your AI:
`
š¬ You: "Scan for security vulnerabilities"
š¤ AI: Analyzing code Found: SQL injection risk in query builder, XSS in template, hardcoded API key, outdated dependency...š¬ You: "Check OWASP Top 10 compliance"
š¤ AI: Issues: A03:Injection (2 cases), A05:Security Misconfiguration (JWT secret in code), A06:Outdated Components...
š¬ You: "What security issues are critical?"
š¤ AI: CRITICAL: SQL injection in /api/users. HIGH: Hardcoded credentials in config.js. MEDIUM: Missing rate limiting...
`⨠Features
š”ļø Vulnerability Detection - SQL injection, XSS, CSRF, and more
š OWASP Top 10 - Check compliance with security standards
š Secrets Detection - Find hardcoded credentials and API keys
š Dependency Scanning - Detect vulnerable packages
š¦ Complete @j0kz MCP Suite
Get all 8 professional development tools - install individually or all at once:
`bash
šÆ Code Quality Suite
npx @j0kz/smart-reviewer-mcp # AI code review
npx @j0kz/test-generator-mcp # Auto-generate tests
npx @j0kz/refactor-assistant-mcp # Refactoring helpšļø Architecture & Design
npx @j0kz/architecture-analyzer-mcp # Architecture analysis
npx @j0kz/api-designer-mcp # API design
npx @j0kz/db-schema-mcp # Database schemasš Documentation & Security
npx @j0kz/doc-generator-mcp # Auto-generate docs
npx @j0kz/security-scanner-mcp # Security scanning
`š View complete collection on GitHub
šÆ How It Works
1. Install once - Run the setup command for your editor
2. Restart editor - Reload to activate the MCP
3. Chat naturally - Just ask your AI assistant to help
4. Get results - The MCP tools work behind the scenes
No configuration files, no complex setup, no API keys needed!
š§ Editor Support
| Editor | Status | Notes |
| --------------- | --------------- | -------------- |
| Claude Code | ā
Full support | Recommended |
| Cursor | ā
Full support | Native MCP |
| Windsurf | ā
Full support | Built-in MCP |
| Roo Code | ā
Full support | MCP compatible |
| Continue | ā
Full support | MCP plugin |
| Zed | ā
Full support | MCP support |
Any MCP-compatible editor works!
ā Troubleshooting
MCP not showing up?
- Restart your editor after installation
- Check:
claude mcp list (Claude Code) to verify connectionCommands not working?
- Make sure Node.js is installed (
node --version`)Still stuck?
- Open an issue
- Check full documentation
MIT Ā© j0KZ
---
Explore more tools: github.com/j0KZ/mcp-agents | npm: @j0kz