Repo Security Scanner — Malicious Code & Supply Chain

In SourceWeft

1. Open Repo Security Scanner — Malicious Code & Supply Chain in the dashboard and add it to a workspace.
2. Connect the required credentials. They are stored privately and never shown on public pages.
3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read the install guide the agent follows

{
  "mcpServers": {
    "repo-security-scanner-malicious-code-sup": {
      "type": "http",
      "url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
    }
  }
}