Arcwall Security

Name: Arcwall Security
Author: rom-baro

@rom-baro

代码仓库

关于 Arcwall Security

Security scanning for Claude Code, Cursor, Windsurf. Detects secrets, scans MCP configs, generates threat models.

#security #ai-security #threat-model #mcp #skills

基本信息

分类

开发工具

传输方式

stdio

发布者

rom-baro

提交者

rom-baro

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": [
        "@arcwall/mcp-server"
      ],
      "env": {
        "ARCWALL_API_KEY": "your-key-here"
      }
    }
  }
}

工具

hardcoded credentials

MCP config vulnerabilities

CLAUDE.md, .cursorrules security

STRIDE analysis

prompt injection testing

pre-commit security check

known CVEs in packages

概览

What is Arcwall Security?

Arcwall Security is an MCP server that provides security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool. It helps developers find hardcoded secrets, MCP configuration vulnerabilities, insecure agent instructions, and other common security issues directly from the AI assistant.

How to use Arcwall Security?

Get a free API key at https://arcwall.io, then add the server configuration to your AI tool’s MCP config file (e.g., ~/.claude/mcp.json for Claude Code) with the command npx @arcwall/mcp-server and the ARCWALL_API_KEY environment variable. Restart the AI tool to enable scanning commands.

Key features of Arcwall Security

Scan for hardcoded credentials and secrets
Detect MCP config vulnerabilities
Analyze CLAUDE.md and .cursorrules security
Generate STRIDE threat models
Test prompts for injection vulnerabilities
Pre-commit security checks
Scan dependencies for known CVEs

Use cases of Arcwall Security

Scan a repository for secrets before sharing code
Check MCP configuration files for misconfigurations
Analyze AI agent instructions for unsafe patterns
Run a pre-commit security check to prevent vulnerabilities
Identify outdated or vulnerable dependencies

FAQ from Arcwall Security

How do I get an API key?

Visit https://arcwall.io and sign up for a free API key.

What AI tools does Arcwall support?

It works with Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

What scanning tools are available?

The server provides seven tools: arcwall_scan_secrets, arcwall_scan_mcp, arcwall_scan_agent_instructions, arcwall_threat_model, arcwall_check_prompt, arcwall_pre_commit, and arcwall_scan_dependencies.