Arcwall Security
@rom-baro
Security scanning for Claude Code, Cursor, Windsurf. Detects secrets, scans MCP configs, generates threat models.
Overview
What is Arcwall Security?
Arcwall Security is an MCP server that provides security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool. It helps developers find hardcoded secrets, MCP configuration vulnerabilities, insecure agent instructions, and other common security issues directly from the AI assistant.
How to use Arcwall Security?
Get a free API key at https://arcwall.io, then add the server configuration to your AI tool’s MCP config file (e.g., ~/.claude/mcp.json for Claude Code) with the command npx @arcwall/mcp-server and the ARCWALL_API_KEY environment variable. Restart the AI tool to enable scanning commands.
Key features of Arcwall Security
- Scan for hardcoded credentials and secrets
- Detect MCP config vulnerabilities
- Analyze CLAUDE.md and .cursorrules security
- Generate STRIDE threat models
- Test prompts for injection vulnerabilities
- Pre-commit security checks
- Scan dependencies for known CVEs
Use cases of Arcwall Security
- Scan a repository for secrets before sharing code
- Check MCP configuration files for misconfigurations
- Analyze AI agent instructions for unsafe patterns
- Run a pre-commit security check to prevent vulnerabilities
- Identify outdated or vulnerable dependencies
FAQ from Arcwall Security
How do I get an API key?
Visit https://arcwall.io and sign up for a free API key.
What AI tools does Arcwall support?
It works with Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.
What scanning tools are available?
The server provides seven tools: arcwall_scan_secrets, arcwall_scan_mcp, arcwall_scan_agent_instructions, arcwall_threat_model, arcwall_check_prompt, arcwall_pre_commit, and arcwall_scan_dependencies.
How do I configure Arcwall in Cursor or Windsurf?
For Cursor, use the same JSON config as Claude Code in .cursor/mcp.json. For Windsurf, add the server via the MCP settings panel.
Is there a dashboard or documentation?
Yes. Dashboard: https://arcwall.io/app.html. Docs: https://arcwall.io/docs.html.
