English Français العربية

Skarn

Official registry Developer tools

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @skarn-security/skarn
Claude Code 
claude mcp add skarn -- npx -y @skarn-security/skarn@0.33.0 mcp
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "skarn": {
            "command": "npx",
            "args": [
                "-y",
                "@skarn-security/skarn@0.33.0",
                "mcp"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

skarn-dist

Compiled Skarn release binaries and man pages, published per tag by the Skarn release pipeline.

The Skarn End User License Agreement (EULA.md) governs every use of Skarn, with or without a license token. It ships here, inside every release tarball, and at https://getskarn.com/terms/.

Install options: https://getskarn.com (Homebrew tap skarn-security/tap, container image ghcr.io/skarn-security/skarn, or the release assets in this repository).

Frequently asked questions

What is Skarn?

Scans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted

How do I install Skarn?

It runs on your machine. In Claude Code: claude mcp add skarn -- npx -y @skarn-security/skarn@0.33.0 mcp. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Skarn need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Skarn open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Skarn?

It is published by skarn-security. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.