MCP Server

Repo Security Scanner — Malicious Code & Supply Chain MCP Server

io.github.eltociear/repo-security-scanner

What is the Repo Security Scanner — Malicious Code & Supply Chain MCP server?

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Copy-paste configuration for popular MCP clients.

transport: http

Config generated by PluginBench — verify against the source before use.

Environment / auth

Authorization
required
secret
Apify API token, sent as `Bearer <token>`. The endpoint answers 401 without one. Runs are billed to YOUR Apify account at this Actor's pay-per-event price — there is no free tier here and no charge to us.

~/.cursor/mcp.json

{
  "mcpServers": {
    "repo-security-scanner": {
      "url": "https://mcp.apify.com/?actors=eltociear/mcp-server-security-scanner"
    }
  }
}

Active

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

Python

MIT

Active

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

Python

Active

Real-world data for agents: air quality, geocoding, quakes, holidays, web search

JavaScript

Fetch URLs and return clean Markdown for RAG — nav, ads and boilerplate stripped.

Maintained

Zero-dependency verifiable-claims MCP: validate safely, verify with allow_execution, self-test.

HTML

MIT

Maintained

MCP server for the Fail Modes taxonomy — a knowledge base of AI system failure modes

JavaScript

MIT