English Français العربية

XploitScan

Official registry Developer tools

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package xploitscan-mcp
Claude Code 
claude mcp add xploitscan -e 'XPLOITSCAN_API_KEY=<your xploitscan_api_key>' -- npx -y xploitscan-mcp@1.9.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "xploitscan": {
            "command": "npx",
            "args": [
                "-y",
                "xploitscan-mcp@1.9.2"
            ],
            "env": {
                "XPLOITSCAN_API_KEY": "<your xploitscan_api_key>"
            }
        }
    }
}

Environment variables

  • XPLOITSCAN_API_KEY secret Optional. An xpls_ API key from a paid-plan account. Without it, the 30 free rules run; with it, all 223.

Frequently asked questions

What is XploitScan?

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key.

How do I install XploitScan?

It runs on your machine. In Claude Code: claude mcp add xploitscan -e 'XPLOITSCAN_API_KEY=<your xploitscan_api_key>' -- npx -y xploitscan-mcp@1.9.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does XploitScan need an API key?

Yes. It expects XPLOITSCAN_API_KEY, which you set in its configuration.

Who maintains XploitScan?

It is published by bgage72590. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.