mcpField
A
Arcwall Security

Arcwall Security

Local
github.com/rom-baroDeveloper Tools1Updated 25w ago
Repository

About Arcwall Security

Arcwall Security is an MCP server for security checks in AI coding tools such as Claude Code, Cursor, and Windsurf. It scans for secrets and configuration risks, tests prompts, checks dependencies, and generates STRIDE threat models.

Key features

  1. 01Scan repositories for hardcoded secrets
  2. 02Check MCP configuration vulnerabilities
  3. 03Review agent instruction files
  4. 04Generate STRIDE threat models
  5. 05Test for prompt injection
  6. 06Scan dependencies for known CVEs

Use cases

  1. 01Check a repository before committing changes
  2. 02Review MCP settings for security issues
  3. 03Assess CLAUDE.md or .cursorrules files
  4. 04Create a project threat model

MCP support

It exposes security scanning and threat-modeling tools to MCP-compatible AI coding clients. An API key is configured through the client’s MCP settings.

#security#ai-security#threat-model#mcp#skills

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": [
        "-y",
        "@arcwall/mcp-server"
      ],
      "env": {
        "ARCWALL_API_KEY": "<ARCWALL_API_KEY>"
      }
    }
  }
}
Run commandnpx -y @arcwall/mcp-server
Environment variables to set
ARCWALL_API_KEYSecretYour Arcwall API key from arcwall.io/app.html

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@arcwall/mcp-server1.0.1

Tools

7

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
pathstringNoDirectory to scan. Defaults to current directory.

Details

From the project README

@arcwall/mcp-server

Security scanning for Claude Code, Cursor, Windsurf, and any MCP-compatible AI coding tool.

Setup

  1. Get your free API key at https://arcwall.io

  2. Add to your MCP config:

Claude Code (~/.claude/mcp.json):

{
  "mcpServers": {
    "arcwall": {
      "command": "npx",
      "args": ["@arcwall/mcp-server"],
      "env": { "ARCWALL_API_KEY": "your-key-here" }
    }
  }
}

Cursor (.cursor/mcp.json): Same config. Windsurf: Add via MCP settings panel.

  1. Restart your AI tool — Arcwall is ready.

Tools

  • arcwall_scan_secrets — hardcoded credentials
  • arcwall_scan_mcp — MCP config vulnerabilities
  • arcwall_scan_agent_instructions — CLAUDE.md, .cursorrules security
  • arcwall_threat_model — STRIDE analysis
  • arcwall_check_prompt — prompt injection testing
  • arcwall_pre_commit — pre-commit security check
  • arcwall_scan_dependencies — known CVEs in packages

Usage

Ask your AI assistant:

  • "Scan this repo for secrets"
  • "Check my MCP configs for vulnerabilities"
  • "Is my CLAUDE.md safe?"
  • "Generate a threat model for this project"
  • "Run a security check before I commit"
  • "Are there vulnerable packages in this project?"

Links

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.