mcpField
S
Skarn

Skarn

Local
getskarn.comSecurity0Updated 4w ago
RepositoryVisit website

About Skarn

Skarn is a command-line security scanner distributed as compiled binaries and man pages. It is intended for users who want to inspect AI coding sessions and assistant configurations for exposed secrets and risky hooks, with local scanning and redaction described in its tagline.

Key features

  1. 01Scans AI coding sessions
  2. 02Checks assistant configurations
  3. 03Finds leaked secrets
  4. 04Flags risky hooks
  5. 05Local scanning and redaction

Use cases

  1. 01Inspect coding sessions for exposed credentials
  2. 02Review assistant configs for risky hooks

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "com-getskarn-skarn": {
      "command": "npx",
      "args": [
        "-y",
        "@skarn-security/skarn"
      ]
    }
  }
}
Run commandnpx -y @skarn-security/skarn

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@skarn-security/skarn0.33.0

Tools

4

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
userstringNoOnly sessions whose user id or email address matches this filter; only a Compliance API export carries either.
hoursintegerNoOnly sessions active in the last N hours. 0 scans all history. Default 0.
projectstringNoOnly sessions whose project name or path matches this filter.
severityenumNoLowest severity to report. Default low.low | medium | high | critical

Details

From the project README

skarn-dist

Compiled Skarn release binaries and man pages, published per tag by the Skarn release pipeline.

The Skarn End User License Agreement (EULA.md) governs every use of Skarn, with or without a license token. It ships here, inside every release tarball, and at https://getskarn.com/terms/.

Install options: https://getskarn.com (Homebrew tap skarn-security/tap, container image ghcr.io/skarn-security/skarn, or the release assets in this repository).

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.