# Sekura

Connects GitHub repository vulnerability scanning directly to your coding assistant. Delivers evidence for every reported defect and quotes pricing upfront.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: sekuraai
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/sekuraai/sekura-plugins
- Updated: 2026-10-20
- HTML: https://affpapa.org/en/nevibecode/mcp/sekura

## What it does

All operations run remotely at `https://sekura.ai/mcp`, leaving zero code executing on your system. Authentication relies on OAuth 2.1 alongside PKCE and dynamic client registration. Your private tokens stay off the local machine. The server inspects code repositories, returns vulnerability findings, and attaches technical proof to each detected issue.

Data inspection calls cost nothing. When a command triggers write tasks like starting an audit or modifying schedules, the system returns a preview containing the repository name, consent phrasing, and calculated price. Charging via card or a Stripe Checkout link happens only after you explicitly confirm that quoted amount.

## Requirements
- Remote server: `https://sekura.ai/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http sekura https://sekura.ai/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add sekura --url https://sekura.ai/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "sekura": {
            "url": "https://sekura.ai/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "sekura": {
            "type": "http",
            "url": "https://sekura.ai/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http sekura https://sekura.ai/mcp
```

## When to use it
- scan a GitHub repository for security vulnerabilities
- obtain technical proof for reported code defects
- schedule regular security audits for a repository
- inspect repositories linked to your account before scanning

## Example prompts
- Scan repository `my-org/auth-service` for vulnerabilities using Sekura
- List my GitHub repositories available for a security scan
- Set up a recurring vulnerability scan for this project

## Similar
- [draft-security-advisory](https://affpapa.org/en/nevibecode/skills/draft-security-advisory.md) — skill · 480 installs
- [saas-security-posture](https://affpapa.org/en/nevibecode/skills/saas-security-posture.md) — skill · 314 installs
- [mantis-chain](https://affpapa.org/en/nevibecode/skills/mantis-chain.md) — skill · 1500 installs
- [mantis-report](https://affpapa.org/en/nevibecode/skills/mantis-report.md) — skill · 1500 installs
- [agent-security-scanner-mcp](https://affpapa.org/en/nevibecode/mcp/agent-security-scanner-mcp.md) — MCP server · ★ 123
- [hound](https://affpapa.org/en/nevibecode/mcp/hound.md) — MCP server · ★ 17

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md