What is Nextscan?
Nextscan is an MCP server that scans a Next.js project directory and returns a compact, structured summary of its routes, API endpoints, database schema, and security posture. It is designed for Next.js developers who want a single‑tool overview instead of manual file‑by‑file exploration.
How to use Nextscan?
Clone the repository, run npm install && npm build, then add the server to an MCP‑compatible client (e.g., Claude Code) with claude mcp add nextscan -- node /path/to/nextscan/dist/index.js. Inside the client, call the scan tool with the required path argument (absolute path to the Next.js project root) and an optional focus parameter (routes, api, schema, or security).
Key features of Nextscan
- Single
scan call returns a full project overview.
- Compact route tree with dynamic/static and client/server flags.
- Hardcoded secrets and environment variable leak detection.
- Auth and validation status per API endpoint.
- Prisma/Drizzle relation mapping including orphan models.
Use cases of Nextscan
- Quickly understand the route structure of an unfamiliar Next.js codebase.
- Audit API endpoints for missing authentication or validation.
- Check a project’s database schema and model relations.
- Scan a Next.js app for common security issues before deployment.
Comments