CodeInspectus security scanner MCP server

CodeInspectus is a security scanner that runs on your own computer. It checks the code your AI wrote for common mistakes, like passwords left in the open or unsafe ways of handling text from users. It is handy if you build small apps with an AI assistant and want a quick safety check before you share or launch them.

What this MCP server does

You ask your AI to check your project for security issues. Your AI passes that request to CodeInspectus. CodeInspectus runs its scanner on your computer and looks through your files for things like exposed keys, weak login rules, and risky patterns in AI-generated code. It then hands the results back to your AI, which explains them to you in plain words. Everything happens locally, so your code does not leave your machine.

Click to zoom

What you can do with it

• Scan a project folder for security problems
• Find secrets and passwords accidentally left in your code
• Check for common mistakes in AI-written JavaScript and TypeScript
• List the security rules it uses so you know what it checks
• Save a scan result as a file you can share or review later
• Compare two scans to see what got better or worse
• Walk through fixing one issue and rescan to confirm it is gone

Try asking your AI

• “Scan my project folder for security issues and explain what you find”
• “Are there any secrets or API keys left in my code?”
• “Check my Supabase setup for weak access rules”
• “Rescan my project and tell me if the issue you fixed is really gone”

What it gives back to you

You get a list of findings, each with a short description, where it is in your code, and how serious it is. Your AI can summarize them in the chat or save them as a file, like a spreadsheet or a report. If you ask it to fix something and rescan, you also see whether the issue is resolved, still there, or not rechecked.

Before you start

Who it's for

People who build small apps with an AI assistant and want a simple security check before sharing or launching them.