secure-mcp
Defensive, agent-first security audits over strict MCP v2 (2026-07-28): scope repositories, route stack-aware guidance, and produce structured remediation findings.
read-only by design stdio transportSecurity review that agents can carry forward
secure-mcp gives coding agents a small, structured toolkit for defensive code review. It inventories a repository, detects its stack, loads only the knowledge packs it needs, and turns likely weaknesses into remediation-ready findings. Version 2.x requires MCP protocol revision 2026-07-28; legacy 2025-era handshakes are rejected.
The server is intentionally local. It reads files under an approved project_root, never executes the target project, and keeps stdout reserved for MCP JSON-RPC.
Clone and install
Clone, build, and install the server plus agent workflow for pi, Cursor, and Codex, or connect another strict v2 stdio client.
Client compatibility
Verified configuration shapes for Codex, Cursor, Claude Desktop, Claude Code, VS Code / Copilot, pi, and generic stdio clients.
Run the audit workflow
Follow the multi-phase sequence from inventory to confirmed findings and a human-facing remediation plan.
Explore the tool surface
See what each tool reads, returns, and contributes to the final report.
Host these docs
Build and verify the Blume site in GitHub Actions, then publish it through a separate Cloudflare Pages or Workers configuration.
The operating model
Scope first
Start with project structure and architecture so scans stay bounded and stack-aware.
Remediate clearly
Every finding carries evidence, classification, impact, remediation, residual risk, and verification.
Verify before reporting
Heuristics are candidates. Agents confirm data flow before treating a signal as a finding.
What it covers today
| Surface | Coverage |
|---|---|
| Web | TypeScript, Next.js App Router, API handlers, cookies, CSRF, and NEXT_PUBLIC_ exposure |
| Apple platforms | Swift, SwiftUI, Keychain, ATS, WebView bridges, deep links, and macOS controls |
| React Native | Expo config, SecureStore, OTA boundaries, deep links, and token storage |
| Cross-cutting | Authentication, injection risks, secrets, threat modeling, and report rollup |
Read the design notes
Understand the process boundaries, filesystem policy, progressive knowledge packs, and extension points.