@j0kz/security-scanner-mcp

Scan for vulnerabilities, OWASP issues, and security best practices

🎉 What's New in v1.0.26

• 🔒 Security Hardening: Enhanced vulnerability detection and OWASP compliance checks
• 📚 Comprehensive Examples: New example files in examples/security-scanner/
• 🎯 Better Error Messages: Improved validation and error handling
• ✅ Production Ready: Enhanced secrets detection and dependency scanning

🚀 Quick Start

⭐ Option 1: Install ALL 8 Tools (Recommended)

Get the complete suite with ONE command:

Claude Code:

# Mac/Linux
curl -fsSL https://raw.githubusercontent.com/j0kz/mcp-agents/main/install-all.sh | bash

# Windows (PowerShell)
irm https://raw.githubusercontent.com/j0kz/mcp-agents/main/install-all.ps1 | iex

Cursor/Windsurf:

# Download complete config
curl -o ~/.cursor/mcp_config.json https://raw.githubusercontent.com/j0kz/mcp-agents/main/mcp_config_all.json

# Or for Windsurf
curl -o ~/.windsurf/mcp_config.json https://raw.githubusercontent.com/j0kz/mcp-agents/main/mcp_config_all.json

Option 2: Install Only This Tool

Claude Code:

claude mcp add security-scanner "npx @j0kz/security-scanner-mcp" --scope user

Cursor/Windsurf: Add to mcp_config.json:

{
  "mcpServers": {
    "security-scanner": {
      "command": "npx",
      "args": ["@j0kz/security-scanner-mcp"]
    }
  }
}

Start Using Immediately

After setup, just chat naturally with your AI:

💬 You: "Scan for security vulnerabilities"
🤖 AI: *Analyzing code* Found: SQL injection risk in query builder, XSS in template, hardcoded API key, outdated dependency...

💬 You: "Check OWASP Top 10 compliance"
🤖 AI: Issues: A03:Injection (2 cases), A05:Security Misconfiguration (JWT secret in code), A06:Outdated Components...

💬 You: "What security issues are critical?"
🤖 AI: CRITICAL: SQL injection in /api/users. HIGH: Hardcoded credentials in config.js. MEDIUM: Missing rate limiting...

✨ Features

🛡️ Vulnerability Detection - SQL injection, XSS, CSRF, and more 📋 OWASP Top 10 - Check compliance with security standards 🔒 Secrets Detection - Find hardcoded credentials and API keys 🔍 Dependency Scanning - Detect vulnerable packages

📦 Complete @j0kz MCP Suite

Get all 8 professional development tools - install individually or all at once:

# 🎯 Code Quality Suite
npx @j0kz/smart-reviewer-mcp      # AI code review
npx @j0kz/test-generator-mcp      # Auto-generate tests
npx @j0kz/refactor-assistant-mcp  # Refactoring help

# 🏗️ Architecture & Design
npx @j0kz/architecture-analyzer-mcp  # Architecture analysis
npx @j0kz/api-designer-mcp           # API design
npx @j0kz/db-schema-mcp              # Database schemas

# 📚 Documentation & Security
npx @j0kz/doc-generator-mcp       # Auto-generate docs
npx @j0kz/security-scanner-mcp    # Security scanning

👉 View complete collection on GitHub

🎯 How It Works

1. Install once - Run the setup command for your editor
2. Restart editor - Reload to activate the MCP
3. Chat naturally - Just ask your AI assistant to help
4. Get results - The MCP tools work behind the scenes

No configuration files, no complex setup, no API keys needed!

🔧 Editor Support

Any MCP-compatible editor works!

❓ Troubleshooting

MCP not showing up?

• Restart your editor after installation
• Check: claude mcp list (Claude Code) to verify connection

Commands not working?

• Make sure Node.js is installed (node --version)
• Try reinstalling: Remove and re-add the MCP

Still stuck?

• Open an issue
• Check full documentation

📄 License

MIT © j0KZ

Explore more tools: github.com/j0KZ/mcp-agents | npm: @j0kz