Arcwall Security
@rom-baro
About Arcwall Security
Security scanning for Claude Code, Cursor, Windsurf. Detects secrets, scans MCP configs, generates threat models.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"arcwall": {
"command": "npx",
"args": [
"@arcwall/mcp-server"
],
"env": {
"ARCWALL_API_KEY": "your-key-here"
}
}
}
}Tools
7hardcoded credentials
MCP config vulnerabilities
CLAUDE.md, .cursorrules security
STRIDE analysis
prompt injection testing
pre-commit security check
known CVEs in packages
Overview
What is Arcwall Security?
Arcwall Security is an MCP server that provides security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool. It helps developers find hardcoded secrets, MCP configuration vulnerabilities, insecure agent instructions, and other common security issues directly from the AI assistant.
How to use Arcwall Security?
Get a free API key at https://arcwall.io, then add the server configuration to your AI tool’s MCP config file (e.g., ~/.claude/mcp.json for Claude Code) with the command npx @arcwall/mcp-server and the ARCWALL_API_KEY environment variable. Restart the AI tool to enable scanning commands.
Key features of Arcwall Security
- Scan for hardcoded credentials and secrets
- Detect MCP config vulnerabilities
- Analyze CLAUDE.md and .cursorrules security
- Generate STRIDE threat models
- Test prompts for injection vulnerabilities
- Pre-commit security checks
- Scan dependencies for known CVEs
Use cases of Arcwall Security
- Scan a repository for secrets before sharing code
- Check MCP configuration files for misconfigurations
- Analyze AI agent instructions for unsafe patterns
- Run a pre-commit security check to prevent vulnerabilities
- Identify outdated or vulnerable dependencies
FAQ from Arcwall Security
How do I get an API key?
Visit https://arcwall.io and sign up for a free API key.
What AI tools does Arcwall support?
It works with Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
What scanning tools are available?
The server provides seven tools: arcwall_scan_secrets, arcwall_scan_mcp, arcwall_scan_agent_instructions, arcwall_threat_model, arcwall_check_prompt, arcwall_pre_commit, and arcwall_scan_dependencies.
How do I configure Arcwall in Cursor or Windsurf?
For Cursor, use the same JSON config as Claude Code in .cursor/mcp.json. For Windsurf, add the server via the MCP settings panel.
Is there a dashboard or documentation?
Yes. Dashboard: https://arcwall.io/app.html. Docs: https://arcwall.io/docs.html.
Frequently asked questions
How do I get an API key?
Visit https://arcwall.io and sign up for a free API key.
What AI tools does Arcwall support?
It works with Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
What scanning tools are available?
The server provides seven tools: `arcwall_scan_secrets`, `arcwall_scan_mcp`, `arcwall_scan_agent_instructions`, `arcwall_threat_model`, `arcwall_check_prompt`, `arcwall_pre_commit`, and `arcwall_scan_dependencies`.
How do I configure Arcwall in Cursor or Windsurf?
For Cursor, use the same JSON config as Claude Code in `.cursor/mcp.json`. For Windsurf, add the server via the MCP settings panel.
Is there a dashboard or documentation?
Yes. Dashboard: https://arcwall.io/app.html. Docs: https://arcwall.io/docs.html.
Basic information
More Developer Tools MCP servers
JetBrains MCP Proxy Server
JetBrainsA model context protocol server to work with JetBrains IDEs: IntelliJ, PyCharm, WebStorm, etc. Also, works with Android Studio
BetterBugs
BetterBugsThe BetterBugs MCP (Model Context Protocol) enables you to load BetterBugs bug reports (via report links) directly to your preferred AI Agents and developer environments with MCP Client capabilities (such as Cursor, VS C
Burp Suite MCP Server Extension
PortSwiggerMCP Server for Burp
MCP Unity Editor (Game Engine)
CoderGamesterModel Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs
mcp-excalidraw
yctimlinMCP server and Claude Code skill for Excalidraw — programmatic canvas toolkit to create, edit, and export diagrams via AI agents with real-time canvas sync.
Comments