Security Scanner Ai Mcp

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.12Updated Oct 30, 2026

Security Scanner Ai MCP Server by MEOK AI Labs

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local Python MCP server for security scanning: vulnerability assessment, SAST, DAST, dependency checks and SBOM analysis from an assistant.

What you can do
  • Run security scans such as vulnerability assessment, SAST and DAST
  • Check dependencies and analyze SBOMs for issues
  • Scan for exposed secrets and inspect HTTP security headers
  • Report findings back to the assistant for review
When to use it
Worth adding when you want an assistant to run basic security checks on code, dependencies or web endpoints from your own machine, for example during development or before a release.
Requirements
Runs locally over stdio as a Python package (pip install security_scanner_ai_mcp, or uvx security_scanner_ai_mcp); needs a Python environment and an MCP client config entry. No authentication, environment variables or headers are declared.
Before you install
The README is largely promotional: it advertises paid tiers, Stripe purchase links and a governance suite, and the free tier is described as limited to 10 calls per day. Tool names appear only as examples, so verify actual capabilities before relying on it. Scans read your code and dependency data locally.

Installation

In SourceWeft

  1. Open Security Scanner Ai Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 74/100]

mcp-name: io.github.CSOAI-ORG/security-scanner-ai-mcp

Security Scanner Ai MCP

[MEOK AI Labs] [GSPC] [License] [PyPI]

Security scanning MCP — vulnerability assessment, SAST, DAST, dependency checking, SBOM analysis

Security scanning MCP — vulnerability assessment, SAST, DAST, dependency checking, SBOM analysis. MIT.

🚀 Quick Start

bash
# Install via pippip install security_scanner_ai_mcp
# Or install via Smitherynpx -y @smithery/cli@latest install security-scanner-ai-mcp --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG

Built with 💜 by MEOK AI Labs · UK Companies House 16939677

MIT © [MEOK AI Labs](https://meok.ai)

Pairs with MEOK Governance Suite

Build something that touches users? You need compliance. MEOK ships 38 governance MCPs that drop in alongside this tool — EU AI Act, DORA, NIS2, CRA, GDPR, ISO 42001, FDA SaMD, MDR, Basel, MiFID II, MiCA, COPPA, and more.

bash
# One-shot install of the governance packnpx meok-setup --pack governance

Free tier: 10 calls/day per MCP. Pro tier (£79/mo): unlimited + cryptographically signed compliance attestations your auditor verifies independently.

→ Full catalogue: councilof.ai/catalogue → MEOK AI Labs: meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

TierPriceWhat you getStripe
Smoke test£1Signed sample MCP-Hardening report + Article 50 PDFhttps://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j
Quick Kit£9EU AI Act Article 50 implementation guide (C2PA + EU-Icon)https://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j
Founder Call£2930-min 1-on-1 with the founderhttps://buy.stripe.com/5kQ6oJ0xS3ce8sl7ew8k91j

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "security-scanner-ai-mcp": {      "command": "uvx",      "args": ["security-scanner-ai-mcp"]    }  }}

Or: pip install security-scanner-ai-mcp then run the security-scanner-ai-mcp command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use scan_dependencies to …"
  • "Use check_headers to …"
  • "Use scan_secrets to …"

Source: README.md at commit 7ed6564

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.12LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts