How do I connect SecureCode MCP Server to Claude?

Run `claude mcp add securecode-mcp -- npx -y @securecode-ai/mcp@latest serve --workspace /path/to/your/project` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.

Is SecureCode MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can SecureCode MCP Server do?

SecureCode MCP Server documents 17 tools to the agent, including securecode.add-known-fact, securecode.agent-scan, securecode.agent-scan-batch. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

SecureCode MCP

Unclaimed

by AhmedSleem06

Standalone SecureCode MCP server - scan, map, fix, and attack tools for AI coding assistants. @securecode-ai/mcp on npm.

Set up this server

Compare servers My Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructionsEnvironment variable names (optional)

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'securecode-mcp' -- 'npx' '-y' '@securecode-ai/mcp@latest' 'serve' '--workspace' '/path/to/your/project'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

17 of 17 tools

Documented tools (17)

From project documentation. A server handshake does not verify each tool’s description or behavior.

securecode.add-known-fact

Add a project fact for faster investigations

securecode.agent-scan

Agent-mode deep scan with 20+ tools, structured proof, and sandbox verification

securecode.agent-scan-batch

Sequential batch scan: map + architecture scout + scan top N files one at a time

securecode.attack

Endpoint red-team testing (beta)

securecode.clear-agent-memory

Clear all agent memory (or one FP by ID)

securecode.clear-finding-reviews

Clear all finding reviews for a workspace

securecode.decide-finding

Accept or reject a finding in the review queue

securecode.fix

Generate a patch for a specific finding

securecode.get-agent-memory

View learned false positives and known facts

securecode.map

Build project map: endpoints, middleware, auth, architecture context

securecode.record-false-positive

Dismiss a finding as FP — agent learns not to report it

securecode.review-findings

Review the finding queue for a workspace

securecode.run-tests

Run tests in sandbox for verification

securecode.scan

Scan code for vulnerabilities (AI pipeline)

securecode.scan-batch

Scan multiple files in one call

securecode.scan-dependencies

Scan lockfiles for known vulnerabilities (OSV/NVD)

securecode.scan-secrets

Scan for hardcoded secrets and PII (local, no AI)

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about SecureCode MCP Server

How do I connect SecureCode MCP Server to Claude?: Run `claude mcp add securecode-mcp -- npx -y @securecode-ai/mcp@latest serve --workspace /path/to/your/project` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is SecureCode MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can SecureCode MCP Server do?: SecureCode MCP Server documents 17 tools to the agent, including securecode.add-known-fact, securecode.agent-scan, securecode.agent-scan-batch. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.