Kryptheon

Kryptheon records flows through your app, re-checks them after each change, and attacks a copy of your database to surface security issues.

What you can do

• Record a user flow through your app and replay it as a check after every change.
• Verify recorded flows still pass, so regressions in app behavior are caught.
• Run attack-style scans against a copy of a Postgres or Supabase database.
• Report findings from flow checks and database scans back to the assistant.

When to use it

Useful when you want an assistant to keep an eye on app flows between changes and to probe a copy of your database for weaknesses before shipping.

Requirements

Runs as a local stdio process installed from the npm package kryptheon-mcp, so Node.js is needed. The database scan requires a Postgres or Supabase connection string supplied through the KN_DATABASE_URL environment variable; no other authentication is declared.