English Français العربية

Repo Security Scanner — Malicious Code & Supply Chain

Official registry Developer tools

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http repo-security-scanner-malicious-code-sup 'https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner' --header 'Authorization: <Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor'\''s pay-per-event price — there is no free tier here and no charge to us.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "repo-security-scanner-malicious-code-sup": {
            "type": "http",
            "url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner",
            "headers": {
                "Authorization": "<Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor's pay-per-event price — there is no free tier here and no charge to us.>"
            }
        }
    }
}

Frequently asked questions

What is Repo Security Scanner — Malicious Code & Supply Chain?

Audit GitHub repos for malicious and supply-chain code before you depend on them.

How do I install Repo Security Scanner — Malicious Code & Supply Chain?

It runs as a remote server. In Claude Code: claude mcp add --transport http repo-security-scanner-malicious-code-sup 'https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner' --header 'Authorization: <Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor'\''s pay-per-event price — there is no free tier here and no charge to us.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Repo Security Scanner — Malicious Code & Supply Chain need an API key?

Yes. It expects Authorization, which you set in its configuration.

Is Repo Security Scanner — Malicious Code & Supply Chain open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Repo Security Scanner — Malicious Code & Supply Chain?

It is published by eltociear. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.