Arcwall Security

Name: Arcwall Security
Author: rom-baro

@rom-baro

Repository

About Arcwall Security

Security scanning for Claude Code, Cursor, Windsurf. Detects secrets, scans MCP configs, generates threat models.

#security #ai-security #threat-model #mcp #skills

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": [
        "@arcwall/mcp-server"
      ],
      "env": {
        "ARCWALL_API_KEY": "your-key-here"
      }
    }
  }
}

Tools

hardcoded credentials

MCP config vulnerabilities

CLAUDE.md, .cursorrules security

STRIDE analysis

prompt injection testing

pre-commit security check

known CVEs in packages

Overview

What is Arcwall Security?

Arcwall Security is an MCP server that provides security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool. It helps developers find hardcoded secrets, MCP configuration vulnerabilities, insecure agent instructions, and other common security issues directly from the AI assistant.

How to use Arcwall Security?

Get a free API key at https://arcwall.io, then add the server configuration to your AI tool’s MCP config file (e.g., ~/.claude/mcp.json for Claude Code) with the command npx @arcwall/mcp-server and the ARCWALL_API_KEY environment variable. Restart the AI tool to enable scanning commands.

Key features of Arcwall Security

Scan for hardcoded credentials and secrets
Detect MCP config vulnerabilities
Analyze CLAUDE.md and .cursorrules security
Generate STRIDE threat models
Test prompts for injection vulnerabilities
Pre-commit security checks
Scan dependencies for known CVEs

Use cases of Arcwall Security

Scan a repository for secrets before sharing code
Check MCP configuration files for misconfigurations
Analyze AI agent instructions for unsafe patterns
Run a pre-commit security check to prevent vulnerabilities
Identify outdated or vulnerable dependencies

FAQ from Arcwall Security

How do I get an API key?

Visit https://arcwall.io and sign up for a free API key.

What AI tools does Arcwall support?

It works with Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

What scanning tools are available?

The server provides seven tools: arcwall_scan_secrets, arcwall_scan_mcp, arcwall_scan_agent_instructions, arcwall_threat_model, arcwall_check_prompt, arcwall_pre_commit, and arcwall_scan_dependencies.