CodeInspectus — Claude Code MCP server: security scans
CodeInspectus scans application code for security issues and helps an agent fix findings and run another scan. It works locally.
claude mcp add codeinspectus -- npx -y codeinspectusWhat CodeInspectus does
The server brings together Opengrep, Gitleaks, and Trivy with CodeInspectus rules for AI-generated code. Checks cover issues such as exposed client-side secrets, unsafe Supabase settings, risky model output, and vulnerable GitHub Actions workflows. Findings use a shared schema keyed to CWE, with framework mappings presented as code-level coverage.
An agent can scan a project, explain the results, and help address them before scanning again. Scans run on the local machine without outbound network traffic. Node.js 22 or later is required. On Linux, Opengrep needs glibc; on Alpine/musl it is unavailable, so selecting it leaves aggregate scan coverage partial. That affects how much of the project the selected engines can check.
What it helps with
- find security flaws in AI-generated application code
- check for leaked secrets and dependency CVEs
- spot unsafe Supabase authorization patterns
- map findings to CWE and compliance frameworks
- rescan a project after code fixes
Example prompts for the agent
- Scan this project with CodeInspectus and explain the security findings.
- Check the code for exposed secrets and vulnerabilities, then help me fix them.
- Rescan the project after these fixes and compare the new findings with the previous run.
How to install CodeInspectus
Platform CLI
claude mcp add codeinspectus -- npx -y codeinspectusPlatform CLI
codex mcp add codeinspectus -- npx -y codeinspectusConfig file
{
"mcpServers": {
"codeinspectus": {
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}Config file
{
"servers": {
"codeinspectus": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"codeinspectus"
]
}
}
}Platform CLI
gemini mcp add codeinspectus npx -y codeinspectusStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about CodeInspectus
How do I install CodeInspectus in Claude Code?
Run claude mcp add codeinspectus -- npx -y codeinspectus. Node.js 22 or later is required.
What does CodeInspectus do?
It is a local security MCP server and CLI for applications built with AI coding tools. It combines established scanners with checks aimed at risks in AI-generated code.
Does CodeInspectus need glibc on Linux?
Opengrep requires glibc on Linux. On Alpine/musl, that engine is unavailable, and selecting it results in partial scan coverage.
