English Français العربية

io.github.rom-baro/arcwall-security

Official registry Developer tools

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

Source code Documentation

What can you do with io.github.rom-baro/arcwall-security?

  • arcwall_scan_secrets — hardcoded credentials
  • arcwall_scan_mcp — MCP config vulnerabilities
  • arcwall_scan_agent_instructions — CLAUDE.md, .cursorrules security
  • arcwall_threat_model — STRIDE analysis
  • arcwall_check_prompt — prompt injection testing
  • arcwall_pre_commit — pre-commit security check
  • arcwall_scan_dependencies — known CVEs in packages

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @arcwall/mcp-server
Claude Code 
claude mcp add arcwall-security -e 'ARCWALL_API_KEY=<your arcwall_api_key>' -- npx -y @arcwall/mcp-server@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "arcwall-security": {
            "command": "npx",
            "args": [
                "-y",
                "@arcwall/mcp-server@1.0.1"
            ],
            "env": {
                "ARCWALL_API_KEY": "<your arcwall_api_key>"
            }
        }
    }
}

Environment variables

  • ARCWALL_API_KEY required secret Your Arcwall API key from arcwall.io/app.html

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. @arcwall/mcp-server
  2. Setup
  3. Tools
  4. Usage
  5. Links

@arcwall/mcp-server

Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

Setup

  1. Get your free API key at https://arcwall.io
  2. Add to your MCP config:

Claude Code (~/.claude/mcp.json):

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": ["@arcwall/mcp-server"],
      "env": { "ARCWALL_API_KEY": "your-key-here" }
    }
  }
}

Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.

  1. Restart your AI tool — Arcwall is ready.

Tools

  • arcwall_scan_secrets — hardcoded credentials
  • arcwall_scan_mcp — MCP config vulnerabilities
  • arcwall_scan_agent_instructions — CLAUDE.md, .cursorrules security
  • arcwall_threat_model — STRIDE analysis
  • arcwall_check_prompt — prompt injection testing
  • arcwall_pre_commit — pre-commit security check
  • arcwall_scan_dependencies — known CVEs in packages

Usage

Ask your AI assistant:

  • "Scan this repo for secrets"
  • "Check my MCP configs for vulnerabilities"
  • "Is my CLAUDE.md safe?"
  • "Generate a threat model for this project"
  • "Run a security check before I commit"
  • "Are there vulnerable packages in this project?"

Frequently asked questions

What is io.github.rom-baro/arcwall-security?

Security scanning for AI coding tools. Detects secrets, threat models, and runs pre-commit checks.

How do I install io.github.rom-baro/arcwall-security?

It runs on your machine. In Claude Code: claude mcp add arcwall-security -e 'ARCWALL_API_KEY=<your arcwall_api_key>' -- npx -y @arcwall/mcp-server@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.rom-baro/arcwall-security need an API key?

Yes. It expects ARCWALL_API_KEY, which you set in its configuration.

Is io.github.rom-baro/arcwall-security open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.rom-baro/arcwall-security?

It is published by rom-baro. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.