Summary
Adds security scanning directly into your AI coding workflow through seven specialized tools. Scan for hardcoded secrets, check MCP configurations for vulnerabilities, analyze CLAUDE.md and .cursorrules files for security issues, and run dependency CVE checks. Also includes STRIDE threat modeling, prompt injection testing, and pre-commit hooks. Requires a free API key from arcwall.io and works with Claude Code, Cursor, Windsurf, or any MCP-compatible editor. Reach for this when you want continuous security checks without leaving your AI assistant, especially useful for catching secrets before they hit version control or validating agent instruction files.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →@arcwall/mcp-server
Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
Setup
-
Get your free API key at https://arcwall.io
-
Add to your MCP config:
Claude Code (~/.claude/mcp.json):
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": ["@arcwall/mcp-server"],
"env": { "ARCWALL_API_KEY": "your-key-here" }
}
}
}
Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.
- Restart your AI tool — Arcwall is ready.
Tools
arcwall_scan_secrets— hardcoded credentialsarcwall_scan_mcp— MCP config vulnerabilitiesarcwall_scan_agent_instructions— CLAUDE.md, .cursorrules securityarcwall_threat_model— STRIDE analysisarcwall_check_prompt— prompt injection testingarcwall_pre_commit— pre-commit security checkarcwall_scan_dependencies— known CVEs in packages
Usage
Ask your AI assistant:
- "Scan this repo for secrets"
- "Check my MCP configs for vulnerabilities"
- "Is my CLAUDE.md safe?"
- "Generate a threat model for this project"
- "Run a security check before I commit"
- "Are there vulnerable packages in this project?"
Links
- Website: https://arcwall.io
- Dashboard: https://arcwall.io/app.html
- Docs: https://arcwall.io/docs.html
- GitHub: https://github.com/rom-baro/arcwall-mcp
- Support: hello@arcwall.io
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Configuration
ARCWALL_API_KEY*secretYour Arcwall API key from arcwall.io/app.html
Categories
Registryactive
Package@arcwall/mcp-server
TransportSTDIO
AuthRequired
UpdatedMay 7, 2026
