mcpField
X

XploitScan

Local
xploitscan.comSecurity
Visit website

About XploitScan

Security scanner for AI-generated code. 30 free rules; all 223 with a paid-plan API key

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "bgage72590-xploitscan": {
      "command": "npx",
      "args": [
        "-y",
        "xploitscan-mcp"
      ],
      "env": {
        "XPLOITSCAN_API_KEY": "<XPLOITSCAN_API_KEY>"
      }
    }
  }
}
Run commandnpx -y xploitscan-mcp
Environment variables to set
XPLOITSCAN_API_KEYSecretOptional. An xpls_ API key from a paid-plan account. Without it, the 30 free rules run; with it, all 223.

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmxploitscan-mcp1.9.3

Tools

3

Saved tool list · updated 1d ago

ParameterTypeRequiredDescription
filesarrayYesThe files to scan. Pass an array of { path, content } objects — typically the files you just wrote or about to write.

Details

The maintainer has not added details yet. Check the README in the repository.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.