securecode.scan-secrets

MCP tool from SecureCode MCP by AhmedSleem06

Scan for hardcoded secrets and PII (local, no AI)

How to use it

Project documentation lists securecode.scan-secrets for the SecureCode MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.

Install SecureCode MCP

$npx -y @securecode-ai/mcp@latest serve --workspace /path/to/your/project
FULL SECURECODE MCP LISTING

Other tools in SecureCode MCP (16)

securecode.add-known-fact

Add a project fact for faster investigations

securecode.agent-scan

Agent-mode deep scan with 20+ tools, structured proof, and sandbox verification

securecode.agent-scan-batch

Sequential batch scan: map + architecture scout + scan top N files one at a time

securecode.attack

Endpoint red-team testing (beta)

securecode.clear-agent-memory

Clear all agent memory (or one FP by ID)

securecode.clear-finding-reviews

Clear all finding reviews for a workspace

securecode.decide-finding

Accept or reject a finding in the review queue

securecode.fix

Generate a patch for a specific finding

securecode.get-agent-memory

View learned false positives and known facts

securecode.map

Build project map: endpoints, middleware, auth, architecture context

securecode.record-false-positive

Dismiss a finding as FP — agent learns not to report it

securecode.review-findings

Review the finding queue for a workspace

securecode.run-tests

Run tests in sandbox for verification

securecode.scan

Scan code for vulnerabilities (AI pipeline)

securecode.scan-batch

Scan multiple files in one call

securecode.scan-dependencies

Scan lockfiles for known vulnerabilities (OSV/NVD)